Lucene search

K
nvd[email protected]NVD:CVE-2008-2963
HistoryJul 02, 2008 - 5:14 p.m.

CVE-2008-2963

2008-07-0217:14:00
CWE-89
web.nvd.nist.gov
2

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

41.9%

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and © post.php.

Affected configurations

Nvd
Node
myblogmyblog
VendorProductVersionCPE
myblogmyblog*cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

41.9%

Related for NVD:CVE-2008-2963