Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform updates/inserts/deletes and database modifications to any table the database user has access to.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.4%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 7.5
Products affected by CVE-2016-8640
  • Pycsw » Pycsw » Version: 0.1.0
    cpe:2.3:a:pycsw:pycsw:0.1.0
  • Pycsw » Pycsw » Version: 1.0.0
    cpe:2.3:a:pycsw:pycsw:1.0.0
  • Pycsw » Pycsw » Version: 1.10.0
    cpe:2.3:a:pycsw:pycsw:1.10.0
  • Pycsw » Pycsw » Version: 1.10.1
    cpe:2.3:a:pycsw:pycsw:1.10.1
  • Pycsw » Pycsw » Version: 1.10.2
    cpe:2.3:a:pycsw:pycsw:1.10.2
  • Pycsw » Pycsw » Version: 1.10.3
    cpe:2.3:a:pycsw:pycsw:1.10.3
  • Pycsw » Pycsw » Version: 1.10.4
    cpe:2.3:a:pycsw:pycsw:1.10.4
  • Pycsw » Pycsw » Version: 1.2.0
    cpe:2.3:a:pycsw:pycsw:1.2.0
  • Pycsw » Pycsw » Version: 1.4.0
    cpe:2.3:a:pycsw:pycsw:1.4.0
  • Pycsw » Pycsw » Version: 1.4.1
    cpe:2.3:a:pycsw:pycsw:1.4.1
  • Pycsw » Pycsw » Version: 1.4.2
    cpe:2.3:a:pycsw:pycsw:1.4.2
  • Pycsw » Pycsw » Version: 1.6.0
    cpe:2.3:a:pycsw:pycsw:1.6.0
  • Pycsw » Pycsw » Version: 1.6.1
    cpe:2.3:a:pycsw:pycsw:1.6.1
  • Pycsw » Pycsw » Version: 1.6.2
    cpe:2.3:a:pycsw:pycsw:1.6.2
  • Pycsw » Pycsw » Version: 1.6.3
    cpe:2.3:a:pycsw:pycsw:1.6.3
  • Pycsw » Pycsw » Version: 1.6.4
    cpe:2.3:a:pycsw:pycsw:1.6.4
  • Pycsw » Pycsw » Version: 1.8.0
    cpe:2.3:a:pycsw:pycsw:1.8.0
  • Pycsw » Pycsw » Version: 1.8.1
    cpe:2.3:a:pycsw:pycsw:1.8.1
  • Pycsw » Pycsw » Version: 1.8.2
    cpe:2.3:a:pycsw:pycsw:1.8.2
  • Pycsw » Pycsw » Version: 1.8.3
    cpe:2.3:a:pycsw:pycsw:1.8.3
  • Pycsw » Pycsw » Version: 1.8.4
    cpe:2.3:a:pycsw:pycsw:1.8.4
  • Pycsw » Pycsw » Version: 1.8.5
    cpe:2.3:a:pycsw:pycsw:1.8.5
  • Pycsw » Pycsw » Version: 2.0.0
    cpe:2.3:a:pycsw:pycsw:2.0.0
  • Pycsw » Pycsw » Version: 2.0.1
    cpe:2.3:a:pycsw:pycsw:2.0.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved