Lucene search
HistoryApr 02, 2008 - 5:44 p.m.
CVE-2008-1640
cve
2008
1640
sql injection
vulnerability
jgs_treffen.php
jgs-xa
jgs-treffen
woltlab burning board
wbb
remote attackers
arbitrary sql commands
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the view_id parameter in an ansicht action.
Affected configurations
Node
jgs-xajgs_treffenRange≤2.0.2
ORjgs-xajgs_treffenMatch2.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| jgs-xa:jgs_treffen | jgs-xa jgs treffen | le | 2.0.2 |
| jgs-xa:jgs_treffen | jgs-xa jgs treffen | eq | 2.0.1 |
Related
prion
prion
Sql injection
2008-04-02 17:44:00
nvd
nvd
CVE-2008-1640
2008-04-02 17:44:00
cvelist
cvelist
CVE-2008-1640
2008-04-02 17:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Related for CVE-2008-1640