Lucene search

[email protected]CVE-2009-3543

HistoryOct 02, 2009 - 7:30 p.m.

CVE-2009-3543

2009-10-0219:30:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

phenotype cms

remote attackers

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.5%

JSON

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name).

Affected configurations

NVD

Node

phenotype-cmsphenotype_cmsRange≤2.8

phenotype-cmsphenotype_cmsMatch1.0

phenotype-cmsphenotype_cmsMatch2.0

phenotype-cmsphenotype_cmsMatch2.1

phenotype-cmsphenotype_cmsMatch2.2

phenotype-cmsphenotype_cmsMatch2.3

phenotype-cmsphenotype_cmsMatch2.4

phenotype-cmsphenotype_cmsMatch2.5

phenotype-cmsphenotype_cmsMatch2.5.1

phenotype-cmsphenotype_cmsMatch2.6

phenotype-cmsphenotype_cmsMatch2.7

CPENameOperatorVersion
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmsle2.8
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq1.0
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.0
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.1
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.2
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.3
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.4
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.5
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.5.1
phenotype-cms:phenotype_cmsphenotype-cms phenotype cmseq2.6

CPE	Name	Operator	Version
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	le	2.8
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	1.0
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.0
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.1
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.2
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.3
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.4
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.5
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.5.1
phenotype-cms:phenotype_cms	phenotype-cms phenotype cms	eq	2.6

Rows per page:

1-10 of 111

References

secunia.com/advisories/35792

www.exploit-db.com/exploits/9107

www.osvdb.org/55799

www.phenotype-cms.com/wiki/development-changelog

exchange.xforce.ibmcloud.com/vulnerabilities/51634

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.5%

JSON

Related for CVE-2009-3543

prion1 cvelist1 nvd1