Lucene search
HistoryMay 06, 2008 - 3:20 p.m.
CVE-2008-2087
cve-2008-2087
sql injection
softbiz
web host directory script
nvd
8.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
66.1%
SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817.
| CPE | Name | Operator | Version |
|---|---|---|---|
| softbiz:web_hosting_directory_script | softbiz web hosting directory script | eq | * |
Related
prion
prion
Sql injection
2008-05-06 15:20:00
cvelist
cvelist
CVE-2008-2087
2008-05-06 15:00:00
CVE-2005-3817
2005-11-26 02:00:00
cve
cve
CVE-2005-3817
2005-11-26 02:03:00
8.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
66.1%
Related for CVE-2008-2087