Lucene search

PRIOn knowledge basePRION:CVE-2009-1208

HistoryApr 01, 2009 - 10:30 a.m.

Sql injection

2009-04-0110:30:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.0%

JSON

SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.

CPENameOperatorVersion
auth2dbeq0.1.5
auth2dbeq0.2.0
auth2dbeq0.2.6
auth2dbeq0.2.5
auth2dbeq0.2.3
auth2dbeq0.1.4
auth2dbeq0.2.2
auth2dbeq0.1.6
auth2dbeq0.1.0
auth2dbeq0.1.7

Name	Operator	Version
auth2db	eq	0.1.5
auth2db	eq	0.2.0
auth2db	eq	0.2.6
auth2db	eq	0.2.5
auth2db	eq	0.2.3
auth2db	eq	0.1.4
auth2db	eq	0.2.2
auth2db	eq	0.1.6
auth2db	eq	0.1.0
auth2db	eq	0.1.7

Rows per page:

1-10 of 161

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823

secunia.com/advisories/34488

www.auth2db.com.ar/?title=CHANGELOG

www.debian.org/security/2009/dsa-1757

www.securityfocus.com/bid/34287

exchange.xforce.ibmcloud.com/vulnerabilities/49518

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.0%

JSON

Related for PRION:CVE-2009-1208