Lucene search
HistoryOct 09, 2008 - 6:14 p.m.
CVE-2008-4527
cve-2008-4527
sql injection
recept.php
recepies module
php-fusion
remote attack
kat_id parameter
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
37.5%
SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the kat_id parameter in a kategorier action. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
php-fusionrecepies_moduleMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| php-fusion:recepies_module | php-fusion recepies module | eq | 1.1 |
Related
cvelist
cvelist
CVE-2008-4527
2008-10-09 18:00:00
prion
prion
Sql injection
2008-10-09 18:14:00
nvd
nvd
CVE-2008-4527
2008-10-09 18:14:15
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
37.5%
Related for CVE-2008-4527