Lucene search

K
cveMitreCVE-2015-3346
HistoryApr 21, 2015 - 4:59 p.m.

CVE-2015-3346

2015-04-2116:59:06
CWE-89
mitre
web.nvd.nist.gov
27
cve-2015-3346
sql injection
vulnerability
wikiwiki module
drupal
remote attack
execution
arbitrary
sql commands

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

50.0%

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd
Node
wikiwiki_projectwikiwikiRange6.x-1.1drupal
VendorProductVersionCPE
wikiwiki_projectwikiwiki*cpe:2.3:a:wikiwiki_project:wikiwiki:*:*:*:*:*:drupal:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

50.0%

Related for CVE-2015-3346