Lucene search
MitreCVE-2009-2881HistoryAug 20, 2009 - 5:30 p.m.
CVE-2009-2881
2009-08-2017:30:06
CWE-89
mitre
web.nvd.nist.gov
30
basilic
sql injection
vulnerability
remote attackers
arbitrary commands
idauthor parameter
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
Low
EPSS
0.001
Percentile
39.7%
Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php and possibly (2) allpubs.php in publications/.
Affected configurations
Node
artis.imagbasilicMatch1.5.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| artis.imag | basilic | 1.5.13 | cpe:2.3:a:artis.imag:basilic:1.5.13:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-2881
2009-08-20 17:00:00
exploitdb
exploitdb
Basilic 1.5.13 - 'index.php?idAuthor' SQL Injection
2009-07-24 00:00:00
nvd
nvd
CVE-2009-2881
2009-08-20 17:30:06
prion
prion
Sql injection
2009-08-20 17:30:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
Low
EPSS
0.001
Percentile
39.7%
Related for CVE-2009-2881