Lucene search

K
cve[email protected]CVE-2009-0104
HistoryJan 09, 2009 - 6:30 p.m.

CVE-2009-0104

2009-01-0918:30:03
CWE-89
web.nvd.nist.gov
22
cve-2009-0104
sql injection
ezpack 4.2b2
nvd
index.php
webboard prog action

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.0%

SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action.

Affected configurations

NVD
Node
se-edezpackMatch4.2beta2
CPENameOperatorVersion
se-ed:ezpackse-ed ezpackeq4.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.0%

Related for CVE-2009-0104