Lucene search

K
cveMitreCVE-2008-2770
HistoryJun 18, 2008 - 10:41 p.m.

CVE-2008-2770

2008-06-1822:41:00
CWE-89
mitre
web.nvd.nist.gov
21
cve
2008
2770
sql injection
mycrocms
index.php
vulnerability
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

27.8%

SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the entry_id parameter.

Affected configurations

Nvd
Node
mycrocmsmycrocmsMatch0.5
VendorProductVersionCPE
mycrocmsmycrocms0.5cpe:2.3:a:mycrocms:mycrocms:0.5:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

27.8%

Related for CVE-2008-2770