Lucene search
Japan Vulnerability NotesJVN:02671769HistoryOct 09, 2015 - 12:00 a.m.
JVN#02671769: phpRechnung vulnerable to SQL injection
2015-10-0900:00:00
Japan Vulnerability Notes
jvn.jp
12
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.001
Percentile
45.8%
phpRechnung is a web-based accounting software. list.php of phpRechnung contains an SQL injection (CWE-89) vulnerability.
Impact
An authenticated attacker may obtain or alter information stored in the database.
Solution
Update the Software
Update to the latest version according to the information provided by the developer.
Products Affected
- phpRechnung 1.6.4 and earlier
Related
nvd
nvd
CVE-2015-5648
2015-10-11 01:59:01
cvelist
cvelist
CVE-2015-5648
2015-10-11 01:00:00
cve
cve
CVE-2015-5648
2015-10-11 01:59:01
prion
prion
Sql injection
2015-10-11 01:59:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.001
Percentile
45.8%
Related for JVN:02671769