Lucene search
HistoryFeb 23, 2010 - 8:30 p.m.
CVE-2010-0698
cve-2010-0698
sql injection
backoffice/login.asp
dynamicsoft wsc cms 2.2
remote attackers
arbitrary sql commands
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.6%
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
dynamicsoftwsc_cmsMatch2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| dynamicsoft:wsc_cms | dynamicsoft wsc cms | eq | 2.2 |
Related
cvelist
cvelist
CVE-2010-0698
2010-02-23 20:00:00
nvd
nvd
CVE-2010-0698
2010-02-23 20:30:00
prion
prion
Sql injection
2010-02-23 20:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.6%
Related for CVE-2010-0698