Lucene search

MitreCVE-2015-1403

HistoryFeb 03, 2015 - 4:59 p.m.

CVE-2015-1403

2015-02-0316:59:20

CWE-89

mitre

web.nvd.nist.gov

cve-2015-1403

sql injection

content rating extension

typo3

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

57.5%

JSON

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd

Node

content_rating_projectcontent_ratingRange≤1.0.3typo3

VendorProductVersionCPE
content_rating_projectcontent_rating*cpe:2.3:a:content_rating_project:content_rating:*:*:*:*:*:typo3:*:*

Vendor	Product	Version	CPE
content_rating_project	content_rating	*	cpe:2.3:a:content_rating_project:content_rating::::::typo3::*

References

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-002/

www.openwall.com/lists/oss-security/2015/01/11/7

www.openwall.com/lists/oss-security/2015/01/27/31

www.securityfocus.com/bid/71984

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

57.5%

JSON

Related for CVE-2015-1403