Lucene search

K
cve[email protected]CVE-2008-6310
HistoryFeb 27, 2009 - 1:30 a.m.

CVE-2008-6310

2009-02-2701:30:00
CWE-89
web.nvd.nist.gov
23
sql injection
w3matter revsense
vulnerability
remote attackers
f[password]
nvd
cve-2008-6310

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.6%

SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the f[password] parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
w3matterrevsenseMatch1.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.6%

Related for CVE-2008-6310