exploitDog

CVE-2019-7316

Опубликовано: 04 фев. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.

Ссылки

https://github.com/eddietcc/CVEnotes/tree/master/Chat2
Exploit
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10330
https://packetstormsecurity.com/files/125780
Exploit
Third Party Advisory
VDB Entry
https://github.com/eddietcc/CVEnotes/tree/master/Chat2
Exploit
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10330
https://packetstormsecurity.com/files/125780
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:css-tricks:chat2:*:*:*:*:*:*:*:*

Версия до 2015-05-05 (включая)

EPSS

Процентиль: 57%

0.00347

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-33jp-9c34-9c92

CVSS3: 9.8

github

больше 3 лет назад

An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.

EPSS

Процентиль: 57%

0.00347

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89