Lucene search
MitreCVE-2008-2453HistoryMay 27, 2008 - 2:32 p.m.
CVE-2008-2453
2008-05-2714:32:00
CWE-89
mitre
web.nvd.nist.gov
22
php
classifieds
script
sql injection
fatherid
browse.php
search.php
remote exploitation
nvd
cve-2008-2453
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.001
Percentile
27.8%
Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID parameter to (1) browse.php and (2) search.php.
Affected configurations
Node
phpclassifiedsscriptphp_classifieds_script
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpclassifiedsscript | php_classifieds_script | * | cpe:2.3:a:phpclassifiedsscript:php_classifieds_script:*:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
PHP Classifieds Script 05122008 - SQL Injection
2008-05-12 00:00:00
nvd
nvd
CVE-2008-2453
2008-05-27 14:32:00
cvelist
cvelist
CVE-2008-2453
2008-05-27 14:00:00
prion
prion
Sql injection
2008-05-27 14:32:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.001
Percentile
27.8%
Related for CVE-2008-2453