Lucene search
HistoryMar 24, 2008 - 9:44 p.m.
CVE-2008-1462
cve-2008-1462
sql injection
runcms
section module
remote attack
8.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.8%
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
Affected configurations
Node
runcmsruncms
| CPE | Name | Operator | Version |
|---|---|---|---|
| runcms:runcms | runcms | eq | * |
Related
prion
prion
Sql injection
2008-03-24 21:44:00
cvelist
cvelist
CVE-2008-1462
2008-03-24 21:00:00
nvd
nvd
CVE-2008-1462
2008-03-24 21:44:00
8.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.8%
Related for CVE-2008-1462