CVE Vulnerability

CVE-2008-3724

SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://holisticinfosec.org/content/view/80/45/ Patch
http://www.papoo.de/cms-news-und-infos/security/patch1-10808.html Patch
http://www.osvdb.org/47554 Patch
http://secunia.com/advisories/31520 Patch Vendor Advisory
http://www.securityfocus.com/bid/30752
https://exchange.xforce.ibmcloud.com/vulnerabilities/44516
Configurations

Configuration 1

cpe:2.3:a:papoo:papoo:2.0:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:3.6.0:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:3.0:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:*:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:3.5:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:3.6:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:3.7:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:papoo:papoo:3.02:*:*:*:*:*:*:*
Information

Published : 2008-08-20 04:41

Updated : 2017-08-08 01:32

NVD link : CVE-2008-3724

Mitre link : CVE-2008-3724

Products Affected
No products.
CWE
CWE-89