Lucene search
HistoryFeb 20, 2009 - 9:30 p.m.
CVE-2008-6220
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.001
Percentile
50.7%
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter.
Affected configurations
Node
cafuegosimple_document_management_systemMatch1.1.4
ORcafuegosimple_document_management_systemMatch1.1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cafuego | simple_document_management_system | 1.1.4 | cpe:2.3:a:cafuego:simple_document_management_system:1.1.4:*:*:*:*:*:*:* |
| cafuego | simple_document_management_system | 1.1.5 | cpe:2.3:a:cafuego:simple_document_management_system:1.1.5:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2008-6220
2009-02-20 21:30:00
cvelist
cvelist
CVE-2008-6220
2009-02-20 21:25:00
prion
prion
Sql injection
2009-02-20 21:30:00
exploitdb
exploitdb
Simple Document Management System 1.1.4 - Authentication Bypass
2008-11-04 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.001
Percentile
50.7%
Related for NVD:CVE-2008-6220