Lucene search

K
nvd[email protected]NVD:CVE-2012-3881
HistoryJul 12, 2012 - 7:55 p.m.

CVE-2012-3881

2012-07-1219:55:07
CWE-89
web.nvd.nist.gov
1

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

47.9%

Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) 95.php, (2) view.php, or (3) rtg.php.

Affected configurations

Nvd
Node
adrian_chaddrtgMatch0.7.4
OR
adrian_chaddrtg2Match0.9.2
VendorProductVersionCPE
adrian_chaddrtg0.7.4cpe:2.3:a:adrian_chadd:rtg:0.7.4:*:*:*:*:*:*:*
adrian_chaddrtg20.9.2cpe:2.3:a:adrian_chadd:rtg2:0.9.2:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

47.9%

Related for NVD:CVE-2012-3881