Lucene search

[email protected]CVE-2009-1909

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2009-1909

2022-10-0316:23:58

CWE-89

[email protected]

web.nvd.nist.gov

cve-2009-1909

sql injection

skip 1.0.2

security vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.5%

JSON

SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

openskipskipRange≤1.0.2

openskipskipRange≤1.1rc

openskipskipRange≤1.1rc2

openskipskipMatch0.9

openskipskipMatch1.0.0

openskipskipMatch1.0.1

CPENameOperatorVersion
openskip:skipopenskip skiple1.0.2
openskip:skipopenskip skiple1.1
openskip:skipopenskip skipeq0.9
openskip:skipopenskip skipeq1.0.0
openskip:skipopenskip skipeq1.0.1

CPE	Name	Operator	Version
openskip:skip	openskip skip	le	1.0.2
openskip:skip	openskip skip	le	1.1
openskip:skip	openskip skip	eq	0.9
openskip:skip	openskip skip	eq	1.0.0
openskip:skip	openskip skip	eq	1.0.1

References

dev.openskip.org/redmine/issues/show/677

jvn.jp/en/jp/JVN03114223/index.html

jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000026.html

portal.openskip.org/top/releasenote-ver1-0-0

secunia.com/advisories/35041

www.securityfocus.com/bid/34898

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for CVE-2009-1909

prion1 cvelist1 jvn1 nvd1