Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2013-0123
cve-2013-0123
sql injection
askia askiaweb
administration interface
remote attackers
arbitrary sql commands
nhistoryid parameter
orderby parameter
pghistory.asp
pgadmin.asp
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.4%
Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL commands via (1) the nHistoryId parameter to WebProd/pages/pgHistory.asp or (2) the OrderBy parameter to WebProd/pages/pgadmin.asp.
Affected configurations
Node
askiaaskiawebMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| askia:askiaweb | askia askiaweb | eq | - |
References
Related
cvelist
cvelist
CVE-2013-0123
2022-10-03 16:15:02
nvd
nvd
CVE-2013-0123
2013-03-21 21:55:00
prion
prion
Sql injection
2013-03-21 21:55:00
cert
cert
Askiaweb survey application contains multiple vulnerabilities
2013-03-20 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.4%
Related for CVE-2013-0123