Lucene search
MitreCVE-2008-2963HistoryJul 02, 2008 - 5:14 p.m.
CVE-2008-2963
2008-07-0217:14:00
CWE-89
mitre
web.nvd.nist.gov
24
cve
2008
2963
sql injection
myblog
remote attackers
arbitrary commands
index.php
member.php
post.php
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.001
Percentile
41.9%
Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and © post.php.
Affected configurations
Node
myblogmyblog
Related
nvd
nvd
CVE-2008-2963
2008-07-02 17:14:00
cvelist
cvelist
CVE-2008-2963
2008-07-02 17:00:00
prion
prion
Sql injection
2008-07-02 17:14:00
exploitdb
exploitdb
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.001
Percentile
41.9%
Related for CVE-2008-2963