Lucene search

MitreCVE-2011-1556

HistoryApr 04, 2011 - 12:27 p.m.

CVE-2011-1556

2011-04-0412:27:38

CWE-89

mitre

web.nvd.nist.gov

cve-2011-1556

sql injection

aphpkb

pdfclasses

pdfgen.php

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.002

Percentile

61.4%

JSON

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy’s PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.

Affected configurations

Nvd

Node

aphpkbaphpkbMatch0.95.4

VendorProductVersionCPE
aphpkbaphpkb0.95.4cpe:2.3:a:aphpkb:aphpkb:0.95.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
aphpkb	aphpkb	0.95.4	cpe:2.3:a:aphpkb:aphpkb:0.95.4:::::::*

References

secunia.com/advisories/43879

www.autosectools.com/Advisories/Andy%27s.PHP.Knowledgebase.Project.0.95.4_SQL.Injection_161.html

www.exploit-db.com/exploits/17061/

www.osvdb.org/71287

www.vupen.com/english/advisories/2011/0823

exchange.xforce.ibmcloud.com/vulnerabilities/66386

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.002

Percentile

61.4%

JSON

Related for CVE-2011-1556