Lucene search
HistoryJun 19, 2008 - 8:41 p.m.
CVE-2008-2778
cve-2008-2778
sql injection
revokebb
search system
security vulnerability
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
43.5%
SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter.
Affected configurations
Node
revokesoftrevokebbMatch1.0rc11
ORrevokesoftrevokebbMatch1.0rc4
| CPE | Name | Operator | Version |
|---|---|---|---|
| revokesoft:revokebb | revokesoft revokebb | eq | 1.0 |
Related
cvelist
cvelist
CVE-2008-2778
2008-06-19 20:00:00
prion
prion
Sql injection
2008-06-19 20:41:00
nvd
nvd
CVE-2008-2778
2008-06-19 20:41:00
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
43.5%
Related for CVE-2008-2778