Vulnerability Description
content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ncm | Ncm Content Management System | All versions |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0223.htmlExploitVendor Advisory
- http://www.securityfocus.com/bid/2584ExploitPatchVendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0223.htmlExploitVendor Advisory
- http://www.securityfocus.com/bid/2584ExploitPatchVendor Advisory
FAQ
What is CVE-2001-0418?
CVE-2001-0418 is a vulnerability with a CVSS score of 5.0 (MEDIUM). content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter.
How severe is CVE-2001-0418?
CVE-2001-0418 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2001-0418?
Check the references section above for vendor advisories and patch information. Affected products include: Ncm Ncm Content Management System.