Lucene search

[email protected]CVE-2008-1486

HistoryMar 24, 2008 - 11:44 p.m.

CVE-2008-1486

2008-03-2423:44:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2008-1486

sql injection

phorum

security vulnerability

remote attack

9.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

50.5%

JSON

SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search.

CPENameOperatorVersion
phorum:phorumphorumeq5.0.15
phorum:phorumphorumeq5.0.1_alpha
phorum:phorumphorumeq5.2.2
phorum:phorumphorumeq5.0.13a
phorum:phorumphorumeq5.0.15a
phorum:phorumphorumeq5.0.2_alpha
phorum:phorumphorumeq5.0.5_beta
phorum:phorumphorumeq5.0.19
phorum:phorumphorumeq5.1.13
phorum:phorumphorumeq5.0.7a_beta

CPE	Name	Operator	Version
phorum:phorum	phorum	eq	5.0.15
phorum:phorum	phorum	eq	5.0.1_alpha
phorum:phorum	phorum	eq	5.2.2
phorum:phorum	phorum	eq	5.0.13a
phorum:phorum	phorum	eq	5.0.15a
phorum:phorum	phorum	eq	5.0.2_alpha
phorum:phorum	phorum	eq	5.0.5_beta
phorum:phorum	phorum	eq	5.0.19
phorum:phorum	phorum	eq	5.1.13
phorum:phorum	phorum	eq	5.0.7a_beta

Rows per page:

1-10 of 401

References

secunia.com/advisories/29519

www.phorum.org/phorum5/read.php?64%2C126815%2C126815

www.securityfocus.com/bid/28540

exchange.xforce.ibmcloud.com/vulnerabilities/41418

9.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

50.5%

JSON

Related for CVE-2008-1486

prion1 cvelist1