CVE-2008-3343

Опубликовано: 28 июл. 2008

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action.

Ссылки

http://secunia.com/advisories/31193
Vendor Advisory
http://securityreason.com/securityalert/4050
http://www.securityfocus.com/archive/1/494556/100/0/threaded
http://www.securityfocus.com/bid/30307
http://www.vupen.com/english/advisories/2008/2164/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43921
http://secunia.com/advisories/31193
Vendor Advisory
http://securityreason.com/securityalert/4050
http://www.securityfocus.com/archive/1/494556/100/0/threaded
http://www.securityfocus.com/bid/30307
http://www.vupen.com/english/advisories/2008/2164/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43921

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:myiosoft:easypublish:3.0:*:trial:*:*:*:*:*

EPSS

Процентиль: 74%

0.00824

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-9858-8hj9-8c32

github

почти 4 года назад