Lucene search
HistoryMay 13, 2008 - 10:20 p.m.
CVE-2008-2177
cve
sql injection
phpdirectorysource
security vulnerability
8.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
57.1%
Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to show.php and the (2) login parameter to admin.php.
Affected configurations
Node
php_directory_sourcephpdirectorysourceMatch1.1.06
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_directory_source:phpdirectorysource | php directory source phpdirectorysource | eq | 1.1.06 |
Related
cvelist
cvelist
CVE-2008-2177
2008-05-13 22:00:00
prion
prion
Sql injection
2008-05-13 22:20:00
nvd
nvd
CVE-2008-2177
2008-05-13 22:20:00
8.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
57.1%
Related for CVE-2008-2177