NVD

Id
275  
Name
CVE-2008-0290  
Description
Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-01-15  
Modified Date
2008-09-05  
Seq
2008-0290  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1870 275 CVE-2008-0290 4887  View
1871 275 CVE-2008-0290 27232  View
1872 275 CVE-2008-0290 digitalhive-base-sql-injection(39602)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47290 JVNDB-2008-002600 Digital Hive における SQL インジェクションの脆弱性 Digital Hive には、SQL インジェクションの脆弱性が存在します。 CVE-2008-0290 30403 CVE-2008-0290 275 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002600.html 2008-01-15 2012-06-26 View