CVE-2008-3588

{"id": "CVE-2008-3588", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-08-11T23:41:00.000", "references": [{"url": "http://securityreason.com/securityalert/4135", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44163", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/6190", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3) urltitle parameter to entries.php."}, {"lang": "es", "value": "Vulnerabilidades de inyecci\u00f3n m\u00faltiple SQL en phsBlog 0.1.1, que permite a los atacantes remotos ejecutar comandos SQL arbitrariamente a trav\u00e9s del (1) par\u00e1metro eid en comments.php, (2) el par\u00e1metro cid en index.php, (3) y el par\u00e1metro urltitle en entries.php."}], "lastModified": "2017-09-29T01:31:45.117", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phsblog:phsblog:0.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C704A97-3E78-4D7B-945E-FF3197E19C66"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}