Lucene search
HistoryMay 11, 2009 - 8:30 p.m.
CVE-2009-1613
cve
2009
1613
leap cms
sql injection
vulnerabilities
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
39.9%
Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter.
Affected configurations
Node
gowondesignsleapMatch0.1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| gowondesigns:leap | gowondesigns leap | eq | 0.1.4 |
Related
cvelist
cvelist
CVE-2009-1613
2009-05-11 20:00:00
nvd
nvd
CVE-2009-1613
2009-05-11 20:30:00
prion
prion
Sql injection
2009-05-11 20:30:00
openvas
openvas
Leap CMS Multiple remote vulnerabilities
2009-04-30 00:00:00
Leap CMS Multiple Vulnerabilities
2009-04-30 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
39.9%
Related for CVE-2009-1613