CVE-2011-1555

2011-04-0412:27:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2011-1555

sql injection

aphpkb 0.95.3

security vulnerability

remote attackers

8.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.1%

JSON

SQL injection vulnerability in saa.php in Andy’s PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
aphpkb:aphpkbaphpkbeq0.93.9
aphpkb:aphpkbaphpkbeq0.86
aphpkb:aphpkbaphpkbeq0.92.1
aphpkb:aphpkbaphpkbeq0.45
aphpkb:aphpkbaphpkbeq0.94.3
aphpkb:aphpkbaphpkbeq0.92.3
aphpkb:aphpkbaphpkbeq0.87
aphpkb:aphpkbaphpkbeq0.361
aphpkb:aphpkbaphpkbeq0.3
aphpkb:aphpkbaphpkbeq0.93.8

CPE	Name	Operator	Version
aphpkb:aphpkb	aphpkb	eq	0.93.9
aphpkb:aphpkb	aphpkb	eq	0.86
aphpkb:aphpkb	aphpkb	eq	0.92.1
aphpkb:aphpkb	aphpkb	eq	0.45
aphpkb:aphpkb	aphpkb	eq	0.94.3
aphpkb:aphpkb	aphpkb	eq	0.92.3
aphpkb:aphpkb	aphpkb	eq	0.87
aphpkb:aphpkb	aphpkb	eq	0.361
aphpkb:aphpkb	aphpkb	eq	0.3
aphpkb:aphpkb	aphpkb	eq	0.93.8