Lucene search
HistoryJan 20, 2012 - 5:55 p.m.
CVE-2012-0905
cve-2012-0905
sql injection
dev!l'z clanportal
dzcp
gamebase addon
remote attackers
sql commands
index.php
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
SQL injection vulnerability in deV!L’z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php.
Affected configurations
Node
dev\!l\'sdev\!l\'z_clanportal_gamebase_addon
| CPE | Name | Operator | Version |
|---|---|---|---|
| dev\!l\'s:dev\!l\'z_clanportal_gamebase_addon | dev!l's dev!l'z clanportal gamebase addon | eq | * |
Related
nvd
nvd
CVE-2012-0905
2012-01-20 17:55:02
prion
prion
Sql injection
2012-01-20 17:55:00
cvelist
cvelist
CVE-2012-0905
2012-01-20 17:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Related for CVE-2012-0905