Lucene search
HistoryMay 07, 2009 - 6:30 p.m.
CVE-2008-6798
security
sql injection
pre projects
pre real estate listings
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.0%
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).
Affected configurations
Node
preprojectspre_real_estate_listings
| CPE | Name | Operator | Version |
|---|---|---|---|
| preprojects:pre_real_estate_listings | preprojects pre real estate listings | eq | * |
Related
prion
prion
Sql injection
2009-05-07 18:30:00
nvd
nvd
CVE-2008-6798
2009-05-07 18:30:00
cvelist
cvelist
CVE-2008-6798
2009-05-07 18:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.0%
Related for CVE-2008-6798