Lucene search
HistorySep 18, 2007 - 8:17 p.m.
CVE-2007-4953
information security
sql injection
simpcms
index.php
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a search site action.
Affected configurations
Node
simpcmssimpcms
| CPE | Name | Operator | Version |
|---|---|---|---|
| simpcms:simpcms | simpcms | eq | * |
Related
prion
prion
Sql injection
2007-09-18 20:17:00
nvd
nvd
CVE-2007-4953
2007-09-18 20:17:00
cvelist
cvelist
CVE-2007-4953
2007-09-18 20:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
Related for CVE-2007-4953