Lucene search
HistoryNov 14, 2008 - 6:07 p.m.
CVE-2008-5070
cve
2008
5070
sql injection
pro chat rooms
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to (1) profiles/index.php and (2) profiles/admin.php.
Affected configurations
Node
pro_chat_roomspro_chat_roomsMatch3.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| pro_chat_rooms:pro_chat_rooms | pro chat rooms | eq | 3.0.3 |
Related
cvelist
cvelist
CVE-2008-5070
2008-11-14 16:00:00
prion
prion
Sql injection
2008-11-14 18:07:00
nvd
nvd
CVE-2008-5070
2008-11-14 18:07:59
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Related for CVE-2008-5070