Lucene search

[email protected]CVE-2009-1245

HistoryApr 06, 2009 - 4:30 p.m.

CVE-2009-1245

2009-04-0616:30:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2009-1245

sql injection

php

pastebin

cccp community clan portal

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.9%

JSON

Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the (1) subject, (2) language, and (3) nickname parameters to php/cccp-pages/submit.php. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

cccp-common-clan-portal-pasterbincccp_pastebinRange≤2.70

cccp-common-clan-portal-pasterbincccp_pastebinMatch2.10

cccp-common-clan-portal-pasterbincccp_pastebinMatch2.20

cccp-common-clan-portal-pasterbincccp_pastebinMatch2.30

cccp-common-clan-portal-pasterbincccp_pastebinMatch2.40

cccp-common-clan-portal-pasterbincccp_pastebinMatch2.50

cccp-common-clan-portal-pasterbincccp_pastebinMatch2.60

CPENameOperatorVersion
cccp-common-clan-portal-pasterbin:cccp_pastebincccp-common-clan-portal-pasterbin cccp pastebinle2.70
cccp-common-clan-portal-pasterbin:cccp_pastebincccp-common-clan-portal-pasterbin cccp pastebineq2.10
cccp-common-clan-portal-pasterbin:cccp_pastebincccp-common-clan-portal-pasterbin cccp pastebineq2.20
cccp-common-clan-portal-pasterbin:cccp_pastebincccp-common-clan-portal-pasterbin cccp pastebineq2.30
cccp-common-clan-portal-pasterbin:cccp_pastebincccp-common-clan-portal-pasterbin cccp pastebineq2.40
cccp-common-clan-portal-pasterbin:cccp_pastebincccp-common-clan-portal-pasterbin cccp pastebineq2.50
cccp-common-clan-portal-pasterbin:cccp_pastebincccp-common-clan-portal-pasterbin cccp pastebineq2.60

CPE	Name	Operator	Version
cccp-common-clan-portal-pasterbin:cccp_pastebin	cccp-common-clan-portal-pasterbin cccp pastebin	le	2.70
cccp-common-clan-portal-pasterbin:cccp_pastebin	cccp-common-clan-portal-pasterbin cccp pastebin	eq	2.10
cccp-common-clan-portal-pasterbin:cccp_pastebin	cccp-common-clan-portal-pasterbin cccp pastebin	eq	2.20
cccp-common-clan-portal-pasterbin:cccp_pastebin	cccp-common-clan-portal-pasterbin cccp pastebin	eq	2.30
cccp-common-clan-portal-pasterbin:cccp_pastebin	cccp-common-clan-portal-pasterbin cccp pastebin	eq	2.40
cccp-common-clan-portal-pasterbin:cccp_pastebin	cccp-common-clan-portal-pasterbin cccp pastebin	eq	2.50
cccp-common-clan-portal-pasterbin:cccp_pastebin	cccp-common-clan-portal-pasterbin cccp pastebin	eq	2.60

References

jcsfog.cvs.sourceforge.net/viewvc/jcsfog/CCCP-Pastebin/php/cccp-admin/inc/functions.php?r1=1.10&r2=1.11

secunia.com/advisories/34474

sourceforge.net/project/shownotes.php?release_id=670960

www.securityfocus.com/bid/34264

exchange.xforce.ibmcloud.com/vulnerabilities/49426

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.9%

JSON

Related for CVE-2009-1245

prion1 cvelist1 nvd1