Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-4904

Опубликовано: 04 нояб. 2008
Источник: nvd
CVSS2: 6
EPSS Низкий

Описание

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_at] parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:typosphere:typo:*:*:*:*:*:*:*:*
Версия до 5.1.3 (включая)
cpe:2.3:a:typosphere:typo:1.6:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:1.6.8:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.4:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.5:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.6:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.7:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.5.8:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:3.99.0:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:3.99.1:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:3.99.2:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:3.99.3:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:3.99.4:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:5.0.3.98:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:5.0.3.98.1:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:5.1:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:typosphere:typo:5.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00364
Низкий

6 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

ubuntu логотип

CVE-2008-4904

ubuntu
больше 17 лет назад

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_at] parameter.

debian логотип

CVE-2008-4904

debian
больше 17 лет назад

SQL injection vulnerability in the "Manage pages" feature (admin/pages ...

github логотип

GHSA-qqf9-g7w9-4xrq

github
больше 3 лет назад

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_at] parameter.

EPSS

Процентиль: 58%
0.00364
Низкий

6 Medium

CVSS2

Дефекты

CWE-89