Lucene search
HistoryJun 30, 2008 - 6:24 p.m.
CVE-2008-2918
cve-2008-2918
sql injection
application dynamics cartweaver 3.0
remote attackers
nvd
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
26.8%
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| application_dynamics:cartweaver | application dynamics cartweaver | eq | 3.0 |
Related
prion
prion
Sql injection
2008-06-30 18:24:00
Sql injection
2006-04-26 20:06:00
exploitdb
exploitdb
Cartweaver 2.16.11 Details.cfm ProdID Parameter SQL Injection
2006-04-25 00:00:00
cve
cve
CVE-2006-2046
2006-04-26 20:06:00
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
26.8%
Related for CVE-2008-2918