Lucene search

K
cve[email protected]CVE-2009-3224
HistorySep 16, 2009 - 7:30 p.m.

CVE-2009-3224

2009-09-1619:30:00
CWE-89
web.nvd.nist.gov
24
sql injection
super mod system
index.php
68 classifieds 3.1 core system
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.8%

SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter.

Affected configurations

NVD
Node
68classifieds68_classifiedsMatch3.1
AND
classified-softwaresuper_mod_system

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.8%

Related for CVE-2009-3224