- Description
- Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the (1) pass and (2) usr parameters in submit.php.
- Source
- cve@mitre.org
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:phplogcon:phplogcon:1.1.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B197ADD6-883E-49EE-8826-0E0E8F1419A1"
},
{
"criteria": "cpe:2.3:a:phplogcon:phplogcon:1.2.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7CF29DEE-DD91-4CFA-AC90-F69397D5A3D1"
},
{
"criteria": "cpe:2.3:a:phplogcon:phplogcon:1.2.1:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B197CA2E-A278-4E81-9FD8-93E26611DBE5"
}
],
"operator": "OR"
}
]
}
]