Lucene search
HistorySep 25, 2008 - 7:25 p.m.
CVE-2008-4241
cve-2008-4241
sql injection
cj ultra plus
remote attackers
arbitrary commands
9.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
49.2%
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cj:ultra_plus | cj ultra plus | le | 1.0.4 |
| cj:ultra_plus | cj ultra plus | eq | * |
| cj:ultra_plus | cj ultra plus | eq | 1.0.3 |
9.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
49.2%
Related for CVE-2008-4241