Lucene search
HistoryOct 09, 2008 - 6:14 p.m.
CVE-2008-4524
sql injection
vulnerability
check user
adaptcms lite
adaptcms pro 1.3
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.9%
SQL injection vulnerability in the “Check User” feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.
Affected configurations
Node
adaptcmsadaptcmsMatch1.3unknownlite
ORadaptcmsadaptcmsMatch1.3unknownpro
| CPE | Name | Operator | Version |
|---|---|---|---|
| adaptcms:adaptcms | adaptcms | eq | 1.3 |
Related
prion
prion
Sql injection
2008-10-09 18:14:00
cvelist
cvelist
CVE-2008-4524
2008-10-09 18:00:00
nvd
nvd
CVE-2008-4524
2008-10-09 18:14:15
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.9%
Related for CVE-2008-4524