Lucene search
HistoryJun 25, 2008 - 12:36 p.m.
CVE-2008-2843
sql injection
doitlive cms
vulnerability
security
nvd
cve-2008-2843
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter in an USUB action to default.asp and the (2) Licence[SpecialLicenseNumber] (aka LicenceId) cookie to edit/default.asp.
Affected configurations
Node
doitlivecmsRange≤2.50
| CPE | Name | Operator | Version |
|---|---|---|---|
| doitlive:cms | doitlive cms | le | 2.50 |
Related
cvelist
cvelist
CVE-2008-2843
2008-06-25 10:00:00
prion
prion
Sql injection
2008-06-25 12:36:00
nvd
nvd
CVE-2008-2843
2008-06-25 12:36:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Related for CVE-2008-2843