Lucene search

K
cveMitreCVE-2008-6376
HistoryMar 02, 2009 - 7:30 p.m.

CVE-2008-6376

2009-03-0219:30:00
CWE-89
mitre
web.nvd.nist.gov
30
sql injection
vulnerability
main.asp
jbook
remote attackers
arbitrary
sql commands

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.001

Percentile

42.1%

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter).

Affected configurations

Nvd
Node
nexusjnrjbookMatch-
VendorProductVersionCPE
nexusjnrjbook-cpe:2.3:a:nexusjnr:jbook:-:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.001

Percentile

42.1%

Related for CVE-2008-6376