Lucene search
HistoryJun 18, 2010 - 9:30 p.m.
CVE-2010-2338
cve-2010-2338
sql injection
redir.asp
vu web visitor analyst
remote attackers
arbitrary sql commands
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.4%
Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
vunetvu_web_visitor_analyst
| CPE | Name | Operator | Version |
|---|---|---|---|
| vunet:vu_web_visitor_analyst | vunet vu web visitor analyst | eq | * |
Related
nvd
nvd
CVE-2010-2338
2010-06-18 21:30:00
prion
prion
Sql injection
2010-06-18 21:30:00
cvelist
cvelist
CVE-2010-2338
2010-06-18 21:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.4%
Related for CVE-2010-2338