Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-0431
cve-2009-0431
sql injection
vulnerability
linkspro standard edition
orderdirection parameter
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.2%
SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter.
Affected configurations
Node
codefixerlinksproMatch_nil__nil_standard
| CPE | Name | Operator | Version |
|---|---|---|---|
| codefixer:linkspro | codefixer linkspro | eq | nil |
Related
nvd
nvd
CVE-2009-0431
2009-02-05 00:30:00
cvelist
cvelist
CVE-2009-0431
2022-10-03 16:24:10
prion
prion
Sql injection
2009-02-05 00:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.2%
Related for CVE-2009-0431