Lucene search
HistoryJun 13, 2008 - 7:41 p.m.
CVE-2008-2692
cve-2008-2692
sql injection
yvcomment
joomla!
remote attackers
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
43.8%
SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php.
Affected configurations
Node
joomlacom_yvcommentMatch1.1
ORjoomlacom_yvcommentMatch1.2
ORjoomlacom_yvcommentMatch1.3
ORjoomlacom_yvcommentMatch1.4
ORjoomlacom_yvcommentMatch1.5
ORjoomlacom_yvcommentMatch1.6
ORjoomlacom_yvcommentMatch1.7
ORjoomlacom_yvcommentMatch1.8
ORjoomlacom_yvcommentMatch1.9
ORjoomlacom_yvcommentMatch1.10
ORjoomlacom_yvcommentMatch1.11
ORjoomlacom_yvcommentMatch1.12
ORjoomlacom_yvcommentMatch1.13
ORjoomlacom_yvcommentMatch1.14
ORjoomlacom_yvcommentMatch1.15
ORjoomlacom_yvcommentMatch1.16
Related
prion
prion
Sql injection
2008-06-13 19:41:00
cvelist
cvelist
CVE-2008-2692
2008-06-13 19:19:00
nvd
nvd
CVE-2008-2692
2008-06-13 19:41:00
checkpoint_advisories
checkpoint_advisories
Joomla Component com_yvcomment SQL Injection (CVE-2008-2692)
2014-11-10 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
43.8%
Related for CVE-2008-2692