Lucene search
HistorySep 18, 2009 - 8:30 p.m.
CVE-2009-3252
cve
2009
3252
sql injection
rock band cms 0.10
news.php
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.2%
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
Affected configurations
Node
dave_robinsonrockbandcmsMatch0.10
| CPE | Name | Operator | Version |
|---|---|---|---|
| dave_robinson:rockbandcms | dave robinson rockbandcms | eq | 0.10 |
Related
prion
prion
Sql injection
2009-09-18 20:30:00
cvelist
cvelist
CVE-2009-3252
2009-09-18 20:00:00
nvd
nvd
CVE-2009-3252
2009-09-18 20:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.2%
Related for CVE-2009-3252