Lucene search
HistoryNov 06, 2008 - 7:29 p.m.
CVE-2008-4991
cve-2008-4991
sql injection
lockon co.
ltd.
ec-cube
nvd
vulnerability
remote attackers
arbitrary sql commands
parameter
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.7%
SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter.
Affected configurations
Node
ec-cubeec-cubeRange≤1.3.5unknowncommunity_edition
ORec-cubeec-cubeRange≤1.4.7
ORec-cubeec-cubeRange≤1.5.0b2
ORec-cubeec-cubeRange≤2.3.0
ORec-cubeec-cubeMatch1.3.4unknowncommunity_edition
Related
cvelist
cvelist
CVE-2008-4991
2008-11-06 19:00:00
jvn
jvn
JVN#19072922 EC-CUBE vulnerable to SQL injection
2008-11-06 00:00:00
prion
prion
Sql injection
2008-11-06 19:29:00
nvd
nvd
CVE-2008-4991
2008-11-06 19:29:33
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.7%
Related for CVE-2008-4991