Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-2345
clansphere
sql injection
cve-2009-2345
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.1%
Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components.
Affected configurations
Node
clansphereclansphereRange≤2009.0
ORclansphereclansphereMatch2007.4
ORclansphereclansphereMatch2007.4.1
ORclansphereclansphereMatch2007.4.2
ORclansphereclansphereMatch2007.4.3
ORclansphereclansphereMatch2007.4.4
ORclansphereclansphereMatch2008
ORclansphereclansphereMatch2008.1
ORclansphereclansphereMatch2008.2
ORclansphereclansphereMatch2008.2.1
ORclansphereclansphereMatch2009.0rc1
ORclansphereclansphereMatch2009.0rc2
ORclansphereclansphereMatch2009.0rc3
Related
nvd
nvd
CVE-2009-2345
2009-07-07 19:30:00
prion
prion
Sql injection
2009-07-07 19:30:00
cvelist
cvelist
CVE-2009-2345
2022-10-03 16:24:06
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.1%
Related for CVE-2009-2345