Lucene search
HistoryOct 01, 2008 - 3:38 p.m.
CVE-2008-4378
cve-2008-4378
sql injection
report.php
mr. cgi guy hot links
nvd
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.7%
SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected configurations
Node
mr._cgi_guyhot_links_sql_phpRange≤3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mr._cgi_guy:hot_links_sql_php | mr. cgi guy hot links sql php | le | 3.0 |
Related
cvelist
cvelist
CVE-2008-4378
2008-10-01 15:00:00
prion
prion
Sql injection
2008-10-01 15:38:00
nvd
nvd
CVE-2008-4378
2008-10-01 15:38:36
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.7%
Related for CVE-2008-4378