Lucene search
HistoryMay 21, 2008 - 1:24 p.m.
CVE-2008-2394
cve
2008
2394
sql injection
tagworx.cms
remote attackers
arbitrary
commands
cid parameter
contact.php
nid parameter
news.php
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.8%
Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to contact.php and the (2) nid parameter to news.php.
Affected configurations
Node
tagworxtagworx_cmsMatch3.00.02
| CPE | Name | Operator | Version |
|---|---|---|---|
| tagworx:tagworx_cms | tagworx tagworx cms | eq | 3.00.02 |
Related
nvd
nvd
CVE-2008-2394
2008-05-21 13:24:00
cvelist
cvelist
CVE-2008-2394
2008-05-21 10:00:00
prion
prion
Sql injection
2008-05-21 13:24:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.8%
Related for CVE-2008-2394