mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
197 lines
6.8 KiB
JSON
197 lines
6.8 KiB
JSON
{
|
|
"id": "CVE-2005-3407",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2005-11-01T12:47:00.000",
|
|
"lastModified": "2017-07-11T01:33:11.377",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL",
|
|
"baseScore": 7.5
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 10.0,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": true,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "NVD-CWE-Other"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.3_final:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "04F2AC68-8BBB-498A-9E64-F34EB55C70B3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "84B064D5-DEE7-4C4A-B3FC-D50834DEE821"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AEE6F403-FAC0-4683-B8A9-7CB2AA284EBA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "84E945E7-1EB2-430B-B1D7-09213CF2D6F1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_final:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E8A473E0-9F20-4BE6-A78B-1644B26F19FB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_final:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7902B990-5232-46F0-8B8A-6E720F3A6D9E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B36C4642-4A06-4E0A-8C8E-0D09AF33278C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9AFB7AA4-FD70-4F4F-BDB1-372D5A8D0C9A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B5DDAEA0-A1B5-49E2-98DD-5272C38E6BA3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6.1_final:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "70CE4811-C15A-48F8-8E50-268911C24108"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_final:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4DF8CB9F-DB55-45B5-812F-DBB3C89FA7C5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3EE2AB2F-625C-4668-A50A-7C1EC2333153"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A18FF2EA-53C5-4EC4-A368-BC1420678B32"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "963CF065-3E46-44AE-9053-413E68C48236"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D65CCEE7-0809-460E-B4B1-9D03C49C4641"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B5E0B6F6-11EF-478E-A63C-343CB3C9C70A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "23572B9F-23E6-40D7-863B-C2AE15D6BD2A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B0C91172-6CA8-44A6-86CC-B525DF88D52D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D13D3A9E-60DF-442B-A629-C2BBFED7A320"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7773515F-16F1-47D7-BF45-66CBF08584F8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7DC3C204-CA3E-4901-98CC-FE84EC1F1CD3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7_dev:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1BFA40B6-E757-4556-ABAC-EFE1A72B8B3F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7_rc1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7431C81C-CF1E-48F5-B42C-8B6796D1DCF6"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/15232",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2005/2237",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22905",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |