Lucene search

[email protected]CVE-2009-1657

HistoryMay 18, 2009 - 12:00 p.m.

CVE-2009-1657

2009-05-1812:00:01

CWE-89

[email protected]

web.nvd.nist.gov

cve

2009

1657

sql injection

starrating plugin

b2evolution

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

JSON

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

b2evolutionb2evolution

AND

b2evolutionstarrating_pluginRange≤0.7.6

b2evolutionstarrating_pluginMatch0.6

b2evolutionstarrating_pluginMatch0.7

b2evolutionstarrating_pluginMatch0.7.5

CPENameOperatorVersion
b2evolution:starrating_pluginb2evolution starrating pluginle0.7.6
b2evolution:starrating_pluginb2evolution starrating plugineq0.6
b2evolution:starrating_pluginb2evolution starrating plugineq0.7
b2evolution:starrating_pluginb2evolution starrating plugineq0.7.5

CPE	Name	Operator	Version
b2evolution:starrating_plugin	b2evolution starrating plugin	le	0.7.6
b2evolution:starrating_plugin	b2evolution starrating plugin	eq	0.6
b2evolution:starrating_plugin	b2evolution starrating plugin	eq	0.7
b2evolution:starrating_plugin	b2evolution starrating plugin	eq	0.7.5

References

osvdb.org/54369

secunia.com/advisories/35053

sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495

www.securityfocus.com/bid/34899

exchange.xforce.ibmcloud.com/vulnerabilities/50417

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

JSON

Related for CVE-2009-1657

prion1 nvd1 cvelist1