ByteOS Network

NVD Vulnerability Details :

CVE-2008-7085

Modified

Source-cve@mitre.org

Published At-26 Aug, 2009 | 14:24

Updated At-29 Sep, 2017 | 01:33

Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the viewpage action to the default URI, probably index.php, or (2) divid parameter in the schedule action to index.php.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

thehockeystop>>hockeystats_online>>2.0

cpe:2.3:a:thehockeystop:hockeystats_online:2.0:*:advanced:*:*:*:*:*

thehockeystop>>hockeystats_online>>2.0

cpe:2.3:a:thehockeystop:hockeystats_online:2.0:*:basic:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	nvd@nist.gov

CWE ID: CWE-89

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/30248	cve@mitre.org	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/43852	cve@mitre.org	N/A
https://www.exploit-db.com/exploits/6084	cve@mitre.org	N/A

Hyperlink: http://www.securityfocus.com/bid/30248

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43852

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.exploit-db.com/exploits/6084

Source: cve@mitre.org

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History