Lucene search
HistoryOct 11, 2013 - 9:55 p.m.
CVE-2013-5028
cve-2013-5028
sql injection
it
hardware-list.dll
kwoksys kwok information server
nvd
8.1 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.0%
SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3) hardwareLocation parameter in a search command.
Related
zdt
zdt
Kwok Information Server 2.7.3 / 2.8.4 SQL Injection Vulnerability
2013-09-13 00:00:00
prion
prion
Sql injection
2013-10-11 21:55:00
cvelist
cvelist
CVE-2013-5028
2013-10-11 21:00:00
packetstorm
packetstorm
Kwok Information Server 2.7.3 / 2.8.4 SQL Injection
2013-09-12 00:00:00
8.1 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.0%
Related for CVE-2013-5028