Lucene search

MitreCVE-2008-7075

HistoryAug 25, 2009 - 10:30 a.m.

CVE-2008-7075

2009-08-2510:30:00

CWE-89

mitre

web.nvd.nist.gov

cve-2008-7075

sql injection

kalptaru infotech ltd

star articles 6.0

remote attack

arbitrary sql commands

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

Low

EPSS

0.005

Percentile

76.6%

JSON

Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via (1) the subcatid parameter to article.list.php; or the artid parameter to (2) article.print.php, (3) article.comments.php, (4) article.publisher.php, or (5) article.download.php; and (6) the PATH_INFO to article.download.php. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

kalptaru_infotechstararticlesMatch6.0

VendorProductVersionCPE
kalptaru_infotechstararticles6.0cpe:2.3:a:kalptaru_infotech:stararticles:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kalptaru_infotech	stararticles	6.0	cpe:2.3:a:kalptaru_infotech:stararticles:6.0:::::::*

References

osvdb.org/50452

osvdb.org/50453

osvdb.org/50454

osvdb.org/50455

osvdb.org/50456

secunia.com/advisories/32887

www.securityfocus.com/bid/32489

www.vupen.com/english/advisories/2008/3269

exchange.xforce.ibmcloud.com/vulnerabilities/46981

www.exploit-db.com/exploits/7240

www.exploit-db.com/exploits/7243

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

Low

EPSS

0.005

Percentile

76.6%

JSON

Related for CVE-2008-7075