Lucene search
HistoryAug 28, 2009 - 3:30 p.m.
CVE-2008-7119
sql injection
webid
auction script
vulnerability
remote attackers
sql commands
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected configurations
Node
webidsupportwebidMatch0.5.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| webidsupport:webid | webidsupport webid | eq | 0.5.4 |
Related
nvd
nvd
CVE-2008-7119
2009-08-28 15:30:00
cvelist
cvelist
CVE-2008-7119
2009-08-28 15:00:00
prion
prion
Sql injection
2009-08-28 15:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Related for CVE-2008-7119