Lucene search
HistorySep 25, 2008 - 7:25 p.m.
CVE-2008-4241
cve-2008-4241
sql injection
cj ultra plus
remote attackers
arbitrary commands
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.5%
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.
Affected configurations
Node
cjultra_plus
ORcjultra_plusRange≤1.0.4
ORcjultra_plusMatch1.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| cj:ultra_plus | cj ultra plus | eq | * |
| cj:ultra_plus | cj ultra plus | le | 1.0.4 |
| cj:ultra_plus | cj ultra plus | eq | 1.0.3 |
Related
prion
prion
Sql injection
2008-09-25 19:25:00
nvd
nvd
CVE-2008-4241
2008-09-25 19:25:18
cvelist
cvelist
CVE-2008-4241
2008-09-25 19:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.5%
Related for CVE-2008-4241