Lucene search

Japan Vulnerability NotesJVN:56373673

HistorySep 20, 2012 - 12:00 a.m.

JVN#56373673: myLittleAdmin for SQL Server 2000 vulnerable to arbitrary script execution

2012-09-2000:00:00

Japan Vulnerability Notes

jvn.jp

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

49.0%

JSON

myLittleAdmin for SQL server 2000 from myLittleTools is a web-based database management software.The management screen in myLittleAdmin for SQL server 2000 contains a vulnerability that may allow arbitrary script execution.

Impact

When a user accesses a malicious database entry through the management screen, an arbitrary script may be executed on the user’s web browser.

Solution

Upgrade the software
Upgrade to the latest version according to the information provided by the developer.

Products Affected

myLittleAdmin for SQL Server 2000

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

49.0%

JSON

Related for JVN:56373673