Lucene search

[email protected]CVE-2008-0290

HistoryJan 16, 2008 - 2:00 a.m.

CVE-2008-0290

2008-01-1602:00:00

CWE-89

[email protected]

web.nvd.nist.gov

cve

2008

0290

sql injection

digital hive 2.0 rc2

remote attackers

remote authenticated administrators

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.4%

JSON

Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.

Affected configurations

NVD

Node

digitalhivedigitalhiveRange≤2.0_rc2

CPENameOperatorVersion
digitalhive:digitalhivedigitalhivele2.0_rc2

CPE	Name	Operator	Version
digitalhive:digitalhive	digitalhive	le	2.0_rc2

References

www.securityfocus.com/bid/27232

exchange.xforce.ibmcloud.com/vulnerabilities/39602

www.exploit-db.com/exploits/4887

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.4%

JSON

Related for CVE-2008-0290

prion1 nvd1 cvelist1