Lucene search

MitreCVE-2011-5022

HistoryDec 29, 2011 - 11:55 a.m.

CVE-2011-5022

2011-12-2911:55:08

CWE-89

mitre

web.nvd.nist.gov

cve

2011

5022

sql injection

search.php

pligg cms

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

30.9%

JSON

SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter.

Affected configurations

Nvd

Node

pliggpligg_cmsMatch1.1.2

VendorProductVersionCPE
pliggpligg_cms1.1.2cpe:2.3:a:pligg:pligg_cms:1.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pligg	pligg_cms	1.1.2	cpe:2.3:a:pligg:pligg_cms:1.1.2:::::::*

References

pligg.svn.sourceforge.net/viewvc/pligg/trunk/search.php?r1=2255&r2=2254&pathrev=2255

sitewat.ch/Advisory/View/5

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

30.9%

JSON

Related for CVE-2011-5022