Lucene search
HistoryJan 08, 2014 - 3:30 p.m.
CVE-2013-7278
sql injection
vulnerability
naxtech cms
afroditi 1.0
remote attackers
sql commands
default.asp
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.7%
SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp.
Affected configurations
Node
naxtechcms_afroditiMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| naxtech:cms_afroditi | naxtech cms afroditi | eq | 1.0 |
Related
nvd
nvd
CVE-2013-7278
2014-01-08 15:30:02
cvelist
cvelist
CVE-2013-7278
2014-01-08 15:00:00
prion
prion
Sql injection
2014-01-08 15:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.7%
Related for CVE-2013-7278