6.8 - CVE-2008-5123

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2008-5123	First vendor Publication	2008-11-17
Vendor	Cve	Last vendor Modification	2024-11-21

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands via the u parameter.

%	Id	Name
100 %	CWE-89	Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection') (CWE/SANS Top 25)

Type	Description	Count
Application	Castillocentral Ccleague cpe:2.3:a:castillocentral:ccleague:1.2::pro:::::	1

Id	Description
46471	CCleague Pro admin.php u Parameter SQL Injection CCLeague Pro contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the admin.php script not properly sanitizing user-supplied input to the 'u' cookie variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

Source	Url

If you want to see full details history, please login or register.