[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2008-0920":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":23,"references":25,"score":32,"epss_score":33,"epss_percentile":34,"is_kev":35,"cisa_kev_date_added":36,"cisa_kev_due_date":36,"cisa_ssvc":37,"attack_mappings":43,"exploits":50},139568,"CVE-2008-0920","EUVD-2008-0927","SQL injection vulnerability in port\u002Fmodifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression.","2008-02-22T23:44:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.5,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL","LOW",true,[20],"CWE-89",[22],"cpe:2.3:a:open_source_security_information_management:os-sim:*:rc5:*:*:*:*:*:*",[24],"Open_Source_Security_Information_Management Os-Sim",[26,27,28,29,30,31],"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F29046","http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F3689","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F488450\u002F100\u002F0\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F488617\u002F100\u002F0\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F27927","https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F5171",0.68,0.01008,0.6277,false,null,{"timestamp":36,"automatable":38,"tech_impact":39,"exploitation":40,"cisa_decision":41,"cisa_remediation_timeline":42},"no","partial","none",{},"FSU",[44],{"name":45,"source":46,"tactics":47,"technique_id":49},"Exploit Public-Facing Application","attack_vector",[48],"initial-access","T1190",[51,52],{"link":31},{"link":30}]