Lucene search

K
nvd[email protected]NVD:CVE-2010-2577
HistoryAug 16, 2010 - 5:12 p.m.

CVE-2010-2577

2010-08-1617:12:54
CWE-89
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to (1) storyrss.php or (2) story.php.

Affected configurations

NVD
Node
pliggpligg_cmsRange1.1.0
OR
pliggpligg_cmsMatch1.0.0
OR
pliggpligg_cmsMatch1.0.0rc1
OR
pliggpligg_cmsMatch1.0.0rc2
OR
pliggpligg_cmsMatch1.0.0rc3
OR
pliggpligg_cmsMatch1.0.0rc4
OR
pliggpligg_cmsMatch1.0.0rc5
OR
pliggpligg_cmsMatch1.0.1
OR
pliggpligg_cmsMatch1.0.2
OR
pliggpligg_cmsMatch1.0.3
OR
pliggpligg_cmsMatch1.0.4

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

Related for NVD:CVE-2010-2577