Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-2945
HistoryApr 02, 2014 - 4:17 p.m.

CVE-2013-2945

2014-04-0216:17:06
CWE-89
[email protected]
web.nvd.nist.gov
3

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.002

Percentile

55.4%

JSON

SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to execute arbitrary SQL commands via the show_statuses[] parameter. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.

Affected configurations

Nvd
Node
b2evolutionb2evolutionRange≤4.1.6
OR
b2evolutionb2evolutionMatch4.1.0
OR
b2evolutionb2evolutionMatch4.1.1
OR
b2evolutionb2evolutionMatch4.1.2
OR
b2evolutionb2evolutionMatch4.1.3
OR
b2evolutionb2evolutionMatch4.1.4
OR
b2evolutionb2evolutionMatch4.1.5
VendorProductVersionCPE
b2evolutionb2evolution*cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*
b2evolutionb2evolution4.1.0cpe:2.3:a:b2evolution:b2evolution:4.1.0:*:*:*:*:*:*:*
b2evolutionb2evolution4.1.1cpe:2.3:a:b2evolution:b2evolution:4.1.1:*:*:*:*:*:*:*
b2evolutionb2evolution4.1.2cpe:2.3:a:b2evolution:b2evolution:4.1.2:*:*:*:*:*:*:*
b2evolutionb2evolution4.1.3cpe:2.3:a:b2evolution:b2evolution:4.1.3:*:*:*:*:*:*:*
b2evolutionb2evolution4.1.4cpe:2.3:a:b2evolution:b2evolution:4.1.4:*:*:*:*:*:*:*
b2evolutionb2evolution4.1.5cpe:2.3:a:b2evolution:b2evolution:4.1.5:*:*:*:*:*:*:*

Related

packetstorm 1
cve 2
prion 2
cvelist 2
htbridge 1
securityvulns 2
exploitdb 1
exploitpack 1
zdt 1
nvd 1
packetstorm
packetstorm
b2evolution 4.1.6 SQL Injection
2013-05-01 00:00:00
cve
cve
CVE-2013-2945
2014-04-02 16:17:06
CVE-2013-7352
2014-04-02 18:55:21
prion
prion
Sql injection
2014-04-02 16:17:00
Cross site request forgery (csrf)
2014-04-02 18:55:00
cvelist
cvelist
CVE-2013-2945
2014-04-02 15:00:00
CVE-2013-7352
2014-04-02 18:00:00
htbridge
htbridge
SQL Injection in b2evolution
2013-04-10 00:00:00
securityvulns
securityvulns
SQL Injection in b2evolution
2013-05-06 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-05-06 00:00:00
exploitdb
exploitdb
b2evolution 4.1.6 - Multiple Vulnerabilities
2013-05-07 00:00:00
exploitpack
exploitpack
b2evolution 4.1.6 - Multiple Vulnerabilities
2013-05-07 00:00:00
zdt
zdt
b2evolution 4.1.6 SQL Injection Vulnerability
2013-05-02 00:00:00
nvd
nvd
CVE-2013-7352
2014-04-02 18:55:21

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.002

Percentile

55.4%

JSON
Related for NVD:CVE-2013-2945
packetstorm1cve2prion2cvelist2htbridge1securityvulns2exploitdb1exploitpack1zdt1nvd1