Lucene search
HistoryDec 21, 2013 - 12:55 a.m.
CVE-2013-2627
cve
2013
2627
sql injection
action.php
leed
light feed
remote attackers
arbitrary sql commands
removefolder action
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
33.9%
SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action.
| CPE | Name | Operator | Version |
|---|---|---|---|
| idleman:leed | idleman leed | le | 1.4 |
Related
prion
prion
Sql injection
2013-12-21 00:55:00
securityvulns
securityvulns
packetstorm
packetstorm
Leed Authentication Bypass, SQL Injection, CSRF
2013-12-21 00:00:00
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
33.9%
Related for CVE-2013-2627