Lucene search
HistoryJan 27, 2015 - 8:04 p.m.
CVE-2015-1364
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.001
Percentile
40.2%
SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/.
Affected configurations
Node
freereprintablesarticlefrMatch3.0.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| freereprintables | articlefr | 3.0.5 | cpe:2.3:a:freereprintables:articlefr:3.0.5:*:*:*:*:*:*:* |
Related
securityvulns
securityvulns
articleFR CMS 3.0.5 - SQL injection vulnerability
2015-02-23 00:00:00
prion
prion
Sql injection
2015-01-27 20:04:00
cvelist
cvelist
CVE-2015-1364
2015-01-27 17:00:00
cve
cve
CVE-2015-1364
2015-01-27 20:04:19
packetstorm
packetstorm
articleFR CMS 3.0.5 SQL Injection
2015-01-21 00:00:00
exploitdb
exploitdb
ArticleFR CMS 3.0.5 - SQL Injection
2015-01-21 00:00:00
openvas
openvas
ArticleFR CMS Multiple Vulnerabilities (Jan 2015)
2015-01-29 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.001
Percentile
40.2%
Related for NVD:CVE-2015-1364