Lucene search
MitreCVE-2008-5636HistoryDec 17, 2008 - 5:30 p.m.
CVE-2008-5636
2008-12-1717:30:00
CWE-89
mitre
web.nvd.nist.gov
28
sql injection
cate.php
lito lite cms
remote attackers
cid parameter
security vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.008
Percentile
81.6%
SQL injection vulnerability in cate.php in Lito Lite CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Affected configurations
Node
lovedesignerlito_lite_cmsMatch_nil_
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lovedesigner | lito_lite_cms | _nil_ | cpe:2.3:a:lovedesigner:lito_lite_cms:_nil_:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-5636
2008-12-17 17:00:00
prion
prion
Sql injection
2008-12-17 17:30:00
exploitdb
exploitdb
Lito Lite CMS - 'cid' SQL Injection
2008-11-29 00:00:00
nvd
nvd
CVE-2008-5636
2008-12-17 17:30:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.008
Percentile
81.6%
Related for CVE-2008-5636