Lucene search
HistoryFeb 18, 2009 - 4:30 p.m.
CVE-2008-6160
cve-2008-6160
sioc module
drupal
unauthorized access
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.3%
Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors.
Affected configurations
Node
drupalsemantically_interconnected_online_communitiesRange≤5.x_1.0
ORdrupalsemantically_interconnected_online_communitiesRange≤6.x_1.0
Related
prion
prion
Design/Logic Flaw
2009-02-18 16:30:00
nvd
nvd
CVE-2008-6160
2009-02-18 16:30:00
cvelist
cvelist
CVE-2008-6160
2009-02-18 16:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.3%
Related for CVE-2008-6160