Lucene search
HistoryFeb 21, 2008 - 7:44 p.m.
CVE-2008-0873
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.001
Percentile
29.1%
SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action.
Affected configurations
Node
jlmzoneclassifiedsMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jlmzone | classifieds | 1.0 | cpe:2.3:a:jlmzone:classifieds:1.0:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
XOOPS Module Classifieds - 'cid' SQL Injection
2008-02-19 00:00:00
prion
prion
Sql injection
2008-02-21 19:44:00
cvelist
cvelist
CVE-2008-0873
2008-02-21 19:00:00
cve
cve
CVE-2008-0873
2008-02-21 19:44:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.001
Percentile
29.1%
Related for NVD:CVE-2008-0873