7.5 - CVE-2008-0089

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2008-0089	First vendor Publication	2008-01-03
Vendor	Cve	Last vendor Modification	2017-09-29

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter.

%	Id	Name
100 %	CWE-89	Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection') (CWE/SANS Top 25)

Type	Description	Count
Application	Clip-Share Clipshare cpe:2.3:a:clip-share:clipshare::::::::	1

Id	Description
39890	ClipShare uprofile.php UID Parameter SQL Injection ClipShare contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'uprofile.php' script not properly sanitizing user-supplied input to the 'UID' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

Source	Url
BID	http://www.securityfocus.com/bid/27108
EXPLOIT-DB	https://www.exploit-db.com/exploits/4830
OSVDB	http://osvdb.org/40077
SECUNIA	http://secunia.com/advisories/28313
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/39364

If you want to see full details history, please login or register.