CVE-2013-3523

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 10-05-2013 11:55

Last modified: - 16-03-2022 05:15

Total changes: - 2

Description

SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page&id= in the URL.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

10.0

6.4

Exploitability score

Impact score

Verification logic

vendor=gajennings AND product=this AND version=1.1.6

vendor=gajennings AND product=this AND version=1.1.5

vendor=gajennings AND product=this AND version=1.0.5

vendor=gajennings AND product=this AND version=1.0.4

vendor=gajennings AND product=this AND version=1.2.2

vendor=gajennings AND product=this AND version=1.2.1

vendor=gajennings AND product=this AND version=1.2.0

vendor=gajennings AND product=this AND version=1.1.2

vendor=gajennings AND product=this AND version=1.1.1

vendor=gajennings AND product=this AND version=1.0.1

vendor=gajennings AND product=this AND version=1.1.8

vendor=gajennings AND product=this AND version=1.1.7

vendor=gajennings AND product=this AND version=1.1.0

vendor=gajennings AND product=this AND version=1.0.6

vendor=gajennings AND product=this AND update=a AND versionEndIncluding=1.2.3

vendor=gajennings AND product=this AND version=1.2.3

vendor=gajennings AND product=this AND version=1.1.4

vendor=gajennings AND product=this AND version=1.1.3

vendor=gajennings AND product=this AND version=1.0.3

vendor=gajennings AND product=this AND version=1.0.2

Reference

Keywords

CVE-2013-3523

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2013-3523

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures