Lucene search
HistoryFeb 25, 2009 - 11:30 p.m.
CVE-2008-6276
cve-2008-6276
sql injection
user karma module
drupal
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.9%
Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via (1) a content type or (2) a voting API value.
Affected configurations
Node
drupaluser_karma_moduleMatch5.x-1.1
ORdrupaluser_karma_moduleMatch5.x-1.2
ORdrupaluser_karma_moduleMatch5.x-1.3
ORdrupaluser_karma_moduleMatch5.x-1.4
ORdrupaluser_karma_moduleMatch5.x-1.5
ORdrupaluser_karma_moduleMatch5.x-1.6
ORdrupaluser_karma_moduleMatch5.x-1.7
ORdrupaluser_karma_moduleMatch5.x-1.8
ORdrupaluser_karma_moduleMatch5.x-1.9
ORdrupaluser_karma_moduleMatch5.x-1.10
ORdrupaluser_karma_moduleMatch5.x-1.12
ORdrupaluser_karma_moduleMatch5.x-1.xdev
ORdrupaluser_karma_moduleMatch6.x-1.xdev
joomlajoomla\!
Related
cvelist
cvelist
CVE-2008-6276
2009-02-25 23:00:00
prion
prion
Sql injection
2009-02-25 23:30:00
nvd
nvd
CVE-2008-6276
2009-02-25 23:30:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.9%
Related for CVE-2008-6276