CVE-2011-5091

Published May 24, 2012

Last updated a year ago

Overview

Description: Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to write_ok.php.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:grboard:grboard:1.8.6.5:*:community:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DDA173E6-1530-4484-B4F8-A22C21A85915"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References