Lucene search

K
cveJpcertCVE-2015-5659
HistoryOct 11, 2015 - 1:59 a.m.

CVE-2015-5659

2015-10-1101:59:04
CWE-89
jpcert
web.nvd.nist.gov
24
cve-2015-5659
sql injection
network applied communication laboratory
shimane cms
nvd
vulnerability
remote authenticated users

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.003

Percentile

69.3%

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd
Node
network_applied_communication_laboratoryshimane_prefecture_cmsMatch2.0.0
VendorProductVersionCPE
network_applied_communication_laboratoryshimane_prefecture_cms2.0.0cpe:2.3:a:network_applied_communication_laboratory:shimane_prefecture_cms:2.0.0:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.003

Percentile

69.3%

Related for CVE-2015-5659