Lucene search
HistoryFeb 03, 2009 - 11:30 a.m.
CVE-2008-6028
cve-2008-6028
sql injection
university of queensland library fez
nvd
vulnerability
subject action
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
27.8%
SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter in a subject action.
Affected configurations
Node
university_of_queenslandfezMatch1.3
ORuniversity_of_queenslandfezMatch2.0rc1
Related
prion
prion
Sql injection
2009-02-03 11:30:00
cvelist
cvelist
CVE-2008-6028
2009-02-03 11:00:00
nvd
nvd
CVE-2008-6028
2009-02-03 11:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
27.8%
Related for CVE-2008-6028