Lucene search

K
cveMitreCVE-2008-1430
HistoryMar 20, 2008 - 6:44 p.m.

CVE-2008-1430

2008-03-2018:44:00
CWE-89
mitre
web.nvd.nist.gov
21
sql injection
links.asp
aspapp
catid parameter
remote attackers
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.002

Percentile

54.0%

SQL injection vulnerability in links.asp in ASPapp allows remote attackers to execute arbitrary SQL commands via the CatId parameter.

Affected configurations

Nvd
Node
iatekaspapp
VendorProductVersionCPE
iatekaspapp*cpe:2.3:a:iatek:aspapp:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.002

Percentile

54.0%

Related for CVE-2008-1430