Lucene search

[email protected]CVE-2009-1410

HistoryApr 24, 2009 - 2:30 p.m.

CVE-2009-1410

2009-04-2414:30:00

CWE-89

[email protected]

web.nvd.nist.gov

cve

2009

1410

sql injection

quick.cms.lite 0.5

remote attackers

arbitrary sql commands

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.6%

JSON

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CPENameOperatorVersion
opensolution:quick.cms.liteopensolution quick.cms.liteeq0.5

CPE	Name	Operator	Version
opensolution:quick.cms.lite	opensolution quick.cms.lite	eq	0.5

References

www.securityfocus.com/bid/34647

exchange.xforce.ibmcloud.com/vulnerabilities/49989

www.exploit-db.com/exploits/8505

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.6%

JSON

Related for CVE-2009-1410

cvelist1 prion1