Lucene search

MitreCVE-2004-2161

HistoryJul 10, 2005 - 4:00 a.m.

CVE-2004-2161

2005-07-1004:00:00

mitre

web.nvd.nist.gov

cve-2004-2161

sql injection

tutos

vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.153

Percentile

95.9%

JSON

SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.

Affected configurations

Nvd

Node

tutostutosMatch1.1_2004-04-14

VendorProductVersionCPE
tutostutos1.1_2004-04-14cpe:2.3:a:tutos:tutos:1.1_2004-04-14:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tutos	tutos	1.1_2004-04-14	cpe:2.3:a:tutos:tutos:1.1_2004-04-14:::::::*

References

cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2

secunia.com/advisories/12606/

secunia.com/advisories/18954

securitytracker.com/id?1011363

www.debian.org/security/2006/dsa-980

www.osvdb.org/10164

www.securityfocus.com/archive/1/375757

www.securityfocus.com/bid/11221

exchange.xforce.ibmcloud.com/vulnerabilities/17444

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.153

Percentile

95.9%

JSON

Related for CVE-2004-2161