Lucene search

K
cve[email protected]CVE-2008-1220
HistoryMar 10, 2008 - 5:44 p.m.

CVE-2008-1220

2008-03-1017:44:00
CWE-89
web.nvd.nist.gov
21
cve-2008-1220
sql injection
4nchat
php-nuke
vulnerability
remote execution

9.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

29.8%

SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
phpnuke:4nchatphpnuke 4nchateq0.91

9.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

29.8%

Related for CVE-2008-1220