Lucene search

PRIOn knowledge basePRION:CVE-2008-1939

HistoryApr 25, 2008 - 6:05 a.m.

Sql injection

2008-04-2506:05:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.9%

JSON

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic parameters to (a) philboard_reply.asp, and the (3) forumid parameter to (b) philboard_newtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920.

CPENameOperatorVersion
philboardeq1.0

CPE	Name	Operator	Version
	philboard	eq	1.0

References

www.securityfocus.com/bid/28871

www.vupen.com/english/advisories/2008/1340/references

exchange.xforce.ibmcloud.com/vulnerabilities/41957

www.exploit-db.com/exploits/5475

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.9%

JSON

Related for PRION:CVE-2008-1939