Lucene search

K
cveMitreCVE-2009-0727
HistoryFeb 24, 2009 - 11:30 p.m.

CVE-2009-0727

2009-02-2423:30:03
CWE-89
mitre
web.nvd.nist.gov
31
sql injection
jobdetails.php
taifajobs 1.0
remote attackers
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

37.5%

SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the jobid parameter.

Affected configurations

Nvd
Node
tony_iha_kazungutaifajobsRange1.0
VendorProductVersionCPE
tony_iha_kazungutaifajobs*cpe:2.3:a:tony_iha_kazungu:taifajobs:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

37.5%

Related for CVE-2009-0727