Lucene search
HistoryApr 06, 2009 - 9:30 p.m.
CVE-2008-6623
cve-2008-6623
sql injection
getin.php
webbdomain post card
web postcards
nvd
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
34.9%
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected configurations
Node
webbdomainpost_cardRange≤1.02
ORwebbdomainpost_cardMatch1.01
| CPE | Name | Operator | Version |
|---|---|---|---|
| webbdomain:post_card | webbdomain post card | le | 1.02 |
| webbdomain:post_card | webbdomain post card | eq | 1.01 |
Related
prion
prion
Sql injection
2009-04-06 21:30:00
nvd
nvd
CVE-2008-6623
2009-04-06 21:30:00
cvelist
cvelist
CVE-2008-6623
2009-04-06 21:00:00
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
34.9%
Related for CVE-2008-6623