Lucene search

PRIOn knowledge basePRION:CVE-2007-0132

HistoryJan 09, 2007 - 11:28 a.m.

Sql injection

2007-01-0911:28:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.3%

JSON

SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CPENameOperatorVersion
ig_shopeq1.4

CPE	Name	Operator	Version
	ig_shop	eq	1.4

References

osvdb.org/33385

packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt

secunia.com/advisories/23604

www.securityfocus.com/archive/1/456043/100/0/threaded

www.securityfocus.com/bid/21874

www.vupen.com/english/advisories/2007/0056

exchange.xforce.ibmcloud.com/vulnerabilities/31299

www.exploit-db.com/exploits/3083

9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.3%

JSON

Related for PRION:CVE-2007-0132