Lucene search
HistoryJun 18, 2002 - 4:00 a.m.
CVE-2002-0581
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.008
Percentile
81.1%
WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.
Affected configurations
Node
workforceroixpedeMatch4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| workforceroi | xpede | 4.1 | cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.008
Percentile
81.1%
Related for NVD:CVE-2002-0581