CVE-2008-0385

SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter…

published February 29, 2008

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with (1) statprt/js/request or (2) dyn/js/request in the PATH_INFO.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01096 · 65.1th percentile
Published
2008-02-29T19:00Z
EPSS history
Timeline
  • 29 FEB 19:00Z
    SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter…
    cvelistv5