Lucene search

K
nvd[email protected]NVD:CVE-2007-5688
HistoryOct 29, 2007 - 7:46 p.m.

CVE-2007-5688

2007-10-2919:46:00
CWE-89
web.nvd.nist.gov
4

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

43.2%

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.

Affected configurations

Nvd
Node
invision_power_servicesinvision_power_board
OR
phpbbphpbb
OR
sebflippermulti-forums_moduleMatch1.3.3
VendorProductVersionCPE
invision_power_servicesinvision_power_board*cpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
phpbbphpbb*cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*
sebflippermulti-forums_module1.3.3cpe:2.3:a:sebflipper:multi-forums_module:1.3.3:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

43.2%

Related for NVD:CVE-2007-5688