Lucene search

[email protected]CVE-2011-3989

HistoryNov 04, 2011 - 9:55 p.m.

CVE-2011-3989

2011-11-0421:55:07

CWE-89

[email protected]

web.nvd.nist.gov

cve-2011-3989

sql injection

dbd::mysqlpp

nvd

vulnerability

remote attackers

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

JSON

SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

hiroyuki_oyamadbd\Match\mysqlpp

hiroyuki_oyamadbd\Match\mysqlpp0.01

hiroyuki_oyamadbd\Match\mysqlpp0.02

hiroyuki_oyamadbd\Match\mysqlpp0.03

CPENameOperatorVersion
hiroyuki_oyama:dbd\:\:mysqlpphiroyuki oyama dbd::mysqlpple0.04
hiroyuki_oyama:dbd\:\:mysqlpphiroyuki oyama dbd::mysqlppeq0.01
hiroyuki_oyama:dbd\:\:mysqlpphiroyuki oyama dbd::mysqlppeq0.02
hiroyuki_oyama:dbd\:\:mysqlpphiroyuki oyama dbd::mysqlppeq0.03

CPE	Name	Operator	Version
hiroyuki_oyama:dbd\:\:mysqlpp	hiroyuki oyama dbd::mysqlpp	le	0.04
hiroyuki_oyama:dbd\:\:mysqlpp	hiroyuki oyama dbd::mysqlpp	eq	0.01
hiroyuki_oyama:dbd\:\:mysqlpp	hiroyuki oyama dbd::mysqlpp	eq	0.02
hiroyuki_oyama:dbd\:\:mysqlpp	hiroyuki oyama dbd::mysqlpp	eq	0.03

References

jvn.jp/en/jp/JVN51216285/index.html

jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000086.html

www.securityfocus.com/bid/50139

exchange.xforce.ibmcloud.com/vulnerabilities/70680

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

JSON

Related for CVE-2011-3989

cvelist1 prion1 jvn1 nvd1