Lucene search
HistoryApr 18, 2008 - 10:05 p.m.
CVE-2008-1895
sql injection
carbon communities
remote attackers
nvd
cve-2008-1895
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.4%
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to events.asp, the (2) UserName parameter to getpassword.asp, and possibly an unspecified parameter to (3) option_Update.asp in an edit action.
Affected configurations
Node
carboncommunitiescarbon_communitiesRange≤2.4
ORcarboncommunitiescarbon_communitiesMatch1.0
ORcarboncommunitiescarbon_communitiesMatch1.1
ORcarboncommunitiescarbon_communitiesMatch2.1
ORcarboncommunitiescarbon_communitiesMatch2.2
ORcarboncommunitiescarbon_communitiesMatch2.3
Related
cvelist
cvelist
CVE-2008-1895
2008-04-18 22:00:00
nvd
nvd
CVE-2008-1895
2008-04-18 22:05:00
prion
prion
Sql injection
2008-04-18 22:05:00
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.4%
Related for CVE-2008-1895