ID

VAR-201912-2005


TITLE

A SQL injection vulnerability exists in the 162100 simple forum system of Ainon Network Technology Service Center, Huanggu District, Shenyang (CNVD-2020-00002)

Trust: 0.6

sources: CNVD: CNVD-2020-00002

DESCRIPTION

The simple forum system of Ainon Network Technology Service Center in Huanggu District, Shenyang City is a forum website building system. A SQL injection vulnerability exists in the 162100 Simple Forum System of Ainong Network Technology Service Center, Huanggu District, Shenyang City. Attackers can use this vulnerability to obtain sensitive database information.

Trust: 0.6

sources: CNVD: CNVD-2020-00002

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-00002

AFFECTED PRODUCTS

vendor:simplemodel:forum system ainon network technology service center huanggu district shenyangscope:eqversion:v20191105

Trust: 0.6

sources: CNVD: CNVD-2020-00002

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-00002
value: HIGH

Trust: 0.6

CNVD: CNVD-2020-00002
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-00002

PATCH

title:A SQL injection vulnerability exists in the 162100 simple forum system of Ainon Network Technology Service Center, Huanggu District, Shenyang (CNVD-2020-00002)url:https://www.cnvd.org.cn/patchinfo/show/190493

Trust: 0.6

sources: CNVD: CNVD-2020-00002

EXTERNAL IDS

db:CNVDid:CNVD-2020-00002

Trust: 0.6

sources: CNVD: CNVD-2020-00002

SOURCES

db:CNVDid:CNVD-2020-00002

LAST UPDATE DATE

2022-05-04T10:03:44.605000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-00002date:2020-01-17T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-00002date:2019-12-29T00:00:00