Lucene search

K
cveMitreCVE-2008-0507
HistoryJan 31, 2008 - 8:00 p.m.

CVE-2008-0507

2008-01-3120:00:00
CWE-89
mitre
web.nvd.nist.gov
27
cve-2008-0507
sql injection
adclick.php
adserve 0.2
wordpress
remote attackers
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

38.6%

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected configurations

Nvd
Node
wordpressadserveMatch0.2
VendorProductVersionCPE
wordpressadserve0.2cpe:2.3:a:wordpress:adserve:0.2:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

38.6%