Lucene search

K
ubuntucveUbuntu.comUB:CVE-2003-1598
HistoryOct 01, 2014 - 12:00 a.m.

CVE-2003-1598

2014-10-0100:00:00
ubuntu.com
ubuntu.com
13

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.004

Percentile

73.6%

WordPress 0.7 (b2 cafelog code) allows SQL injection. /
Blog.header.php. $ posts not converted to an integer, so we can inject
sql in this variable. In MySQL 4.x can use UNION and subselects to
obtain privileges.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.004

Percentile

73.6%