Overview
- Description
- SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4300BB9D-1A72-4005-AA68-35DB57A551E1"
},
{
"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "797726FF-24E9-415A-AC8B-2AE3301F8824"
},
{
"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC6BB8DE-9497-42D7-A29D-BCAC75337A96"
},
{
"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54AB8E47-5484-4449-88BA-90F0CCED285A"
},
{
"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B111556A-56AC-413C-A1B7-D973492BA8F5"
}
],
"operator": "OR"
}
]
}
]