Lucene search
HistoryJan 29, 2009 - 6:30 p.m.
CVE-2009-0324
cve
2009
0324
sql injection
bibciter
nvd
vulnerability
remote execution
idp
idc
idu
reports
projects
contacts
users
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.7%
Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) idp parameter to reports/projects.php, the (2) idc parameter to reports/contacts.php, and the (3) idu parameter to reports/users.php.
Affected configurations
Node
bibciterbibciterMatch1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| bibciter:bibciter | bibciter | eq | 1.4 |
Related
prion
prion
Sql injection
2009-01-29 18:30:00
cvelist
cvelist
CVE-2009-0324
2009-01-29 18:09:00
nvd
nvd
CVE-2009-0324
2009-01-29 18:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.7%
Related for CVE-2009-0324