Lucene search

[email protected]CVE-2008-4531

HistoryOct 09, 2008 - 6:14 p.m.

CVE-2008-4531

2008-10-0918:14:15

CWE-89

[email protected]

web.nvd.nist.gov

cve-2008-4531

sql injection

brilliant gallery 5.x

drupal

remote attackers

arbitrary sql commands

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.3%

JSON

SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries. NOTE: this might be the same issue as CVE-2008-4338.

Affected configurations

NVD

Node

drupalbrilliant_galleryRange≤5.x-4.1

drupalbrilliant_galleryMatch5.x-1.0

drupalbrilliant_galleryMatch5.x-1.1

drupalbrilliant_galleryMatch5.x-1.2

drupalbrilliant_galleryMatch5.x-2.1

drupalbrilliant_galleryMatch5.x-2.2

drupalbrilliant_galleryMatch5.x-2.3

drupalbrilliant_galleryMatch5.x-2.4

drupalbrilliant_galleryMatch5.x-2.5

drupalbrilliant_galleryMatch5.x-2.6

drupalbrilliant_galleryMatch5.x-2.7

drupalbrilliant_galleryMatch5.x-2.8

drupalbrilliant_galleryMatch5.x-2.9

drupalbrilliant_galleryMatch5.x-2.10

drupalbrilliant_galleryMatch5.x-2.11

drupalbrilliant_galleryMatch5.x-2.12

drupalbrilliant_galleryMatch5.x-2.13

drupalbrilliant_galleryMatch5.x-2.14

drupalbrilliant_galleryMatch5.x-2.15

drupalbrilliant_galleryMatch5.x-2.16

drupalbrilliant_galleryMatch5.x-2.17

drupalbrilliant_galleryMatch5.x-3.0

drupalbrilliant_galleryMatch5.x-3.1

drupalbrilliant_galleryMatch5.x-3.2

drupalbrilliant_galleryMatch5.x-3.3

drupalbrilliant_galleryMatch5.x-4.0

CPENameOperatorVersion
drupal:brilliant_gallerydrupal brilliant galleryle5.x-4.1
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-1.0
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-1.1
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-1.2
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-2.1
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-2.2
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-2.3
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-2.4
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-2.5
drupal:brilliant_gallerydrupal brilliant galleryeq5.x-2.6

CPE	Name	Operator	Version
drupal:brilliant_gallery	drupal brilliant gallery	le	5.x-4.1
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-1.0
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-1.1
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-1.2
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-2.1
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-2.2
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-2.3
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-2.4
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-2.5
drupal:brilliant_gallery	drupal brilliant gallery	eq	5.x-2.6

Rows per page:

1-10 of 261

References

drupal.org/node/315919

secunia.com/advisories/32106

www.securityfocus.com/bid/31554

exchange.xforce.ibmcloud.com/vulnerabilities/45637

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.3%

JSON

Related for CVE-2008-4531

prion2 nvd2 cvelist2 cve1