Lucene search
HistoryJun 03, 2008 - 3:32 p.m.
CVE-2008-2521
cve-2008-2521
sql injection
yabsoft
mega file hosting script
mfh
1.2
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.3%
SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter.
Affected configurations
Node
yabsoftmega_file_hosting_scriptMatch1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| yabsoft:mega_file_hosting_script | yabsoft mega file hosting script | eq | 1.2 |
Related
nvd
nvd
CVE-2008-2521
2008-06-03 15:32:00
cvelist
cvelist
CVE-2008-2521
2008-06-03 15:00:00
prion
prion
Sql injection
2008-06-03 15:32:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.3%
Related for CVE-2008-2521