Vulnerability Details CVE-2001-1348
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html
- http://twig.screwdriver.net/index.php3
- http://www.iss.net/security_center/static/6619.php
- http://www.securityfocus.com/bid/2791
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html
- http://twig.screwdriver.net/index.php3
- http://www.iss.net/security_center/static/6619.php
- http://www.securityfocus.com/bid/2791
Products affected by CVE-2001-1348
-
cpe:2.3:a:twig_development_team:twig:2.0
-
cpe:2.3:a:twig_development_team:twig:2.0.1
-
cpe:2.3:a:twig_development_team:twig:2.0.2
-
cpe:2.3:a:twig_development_team:twig:2.0.3
-
cpe:2.3:a:twig_development_team:twig:2.0_beta1
-
cpe:2.3:a:twig_development_team:twig:2.0_beta2
-
cpe:2.3:a:twig_development_team:twig:2.0_beta3
-
cpe:2.3:a:twig_development_team:twig:2.1
-
cpe:2.3:a:twig_development_team:twig:2.1.1
-
cpe:2.3:a:twig_development_team:twig:2.2
-
cpe:2.3:a:twig_development_team:twig:2.2.1
-
cpe:2.3:a:twig_development_team:twig:2.2.2
-
cpe:2.3:a:twig_development_team:twig:2.2.3
-
cpe:2.3:a:twig_development_team:twig:2.3
-
cpe:2.3:a:twig_development_team:twig:2.3.1
-
cpe:2.3:a:twig_development_team:twig:2.3.2
-
cpe:2.3:a:twig_development_team:twig:2.4
-
cpe:2.3:a:twig_development_team:twig:2.5
-
cpe:2.3:a:twig_development_team:twig:2.5.1
-
cpe:2.3:a:twig_development_team:twig:2.6
-
cpe:2.3:a:twig_development_team:twig:2.6.1