Lucene search

MitreCVE-2008-3369

HistoryJul 30, 2008 - 5:41 p.m.

CVE-2008-3369

2008-07-3017:41:00

CWE-89

mitre

web.nvd.nist.gov

cve-2008-3369

sql injection

viart shop 3.5

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.01

Percentile

83.8%

JSON

SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

Affected configurations

Nvd

Node

viartviart_shopRange≤3.5

viartviart_shopMatch2.5.5

viartviart_shopMatch3.2

viartviart_shopMatch3.3

viartviart_shopMatch3.3beta

viartviart_shopMatch3.3.2

VendorProductVersionCPE
viartviart_shop*cpe:2.3:a:viart:viart_shop:*:*:*:*:*:*:*:*
viartviart_shop2.5.5cpe:2.3:a:viart:viart_shop:2.5.5:*:*:*:*:*:*:*
viartviart_shop3.2cpe:2.3:a:viart:viart_shop:3.2:*:*:*:*:*:*:*
viartviart_shop3.3cpe:2.3:a:viart:viart_shop:3.3:*:*:*:*:*:*:*
viartviart_shop3.3cpe:2.3:a:viart:viart_shop:3.3:beta:*:*:*:*:*:*
viartviart_shop3.3.2cpe:2.3:a:viart:viart_shop:3.3.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
viart	viart_shop	*	cpe:2.3:a:viart:viart_shop::::::::
viart	viart_shop	2.5.5	cpe:2.3:a:viart:viart_shop:2.5.5:::::::*
viart	viart_shop	3.2	cpe:2.3:a:viart:viart_shop:3.2:::::::*
viart	viart_shop	3.3	cpe:2.3:a:viart:viart_shop:3.3:::::::*
viart	viart_shop	3.3	cpe:2.3:a:viart:viart_shop:3.3:beta::::::
viart	viart_shop	3.3.2	cpe:2.3:a:viart:viart_shop:3.3.2:::::::*

References

secunia.com/advisories/31275

securityreason.com/securityalert/4065

www.gulftech.org/?node=research&article_id=00118-07292008

www.securityfocus.com/archive/1/494839/100/0/threaded

www.securityfocus.com/bid/30409

www.viart.com/another_critical_sql_injection_security_fix_for_version_3_5.html

www.vupen.com/english/advisories/2008/2205/references

exchange.xforce.ibmcloud.com/vulnerabilities/44045

www.exploit-db.com/exploits/6154

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.01

Percentile

83.8%

JSON

Related for CVE-2008-3369