CVE-2011-5091

Published May 24, 2012

Last updated 9 months ago

Overview

Description: Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to write_ok.php.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:grboard:grboard:1.8.6.5:*:community:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DDA173E6-1530-4484-B4F8-A22C21A85915"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References