Lucene search
HistoryDec 05, 2005 - 1:03 a.m.
CVE-2005-4007
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving (1) mvc/controller/user_request_analysis.inc.php and (2) usr/xml/ddc/authorization.xml.
Affected configurations
Node
redgraphicsapid_cmsRange≤1.2.3.02
ORredgraphicsapid_cmsMatch1.2.3
ORredgraphicsapid_cmsMatch1.2.3rc2
ORredgraphicsapid_cmsMatch1.2.3rc3
ORredgraphicsapid_cmsMatch1.2.3rc5
ORredgraphicsapid_cmsMatch1.2.3stable
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Related for NVD:CVE-2005-4007