Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2231
HistoryJun 05, 2008 - 12:00 a.m.

CVE-2008-2231

2008-06-0500:00:00
ubuntu.com
ubuntu.com
15

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

76.2%

SQL injection vulnerability in Slashdot Like Automated Storytelling
Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote
attackers to execute SQL commands and read table information via the id
parameter.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

76.2%