Vulnerabilities > CVE-2001-1348 - Unspecified vulnerability in Twig Development Team Twig

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

NVD

Published: 2001-05-28

Updated: 2008-09-05

Summary

TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.

Part	Description	Count
Application	Twig_Development_Team Twig Development Team Twig 2.0 Twig Development Team Twig 2.0.1 Twig Development Team Twig 2.0.2 Twig Development Team Twig 2.0.3 Twig Development Team Twig 2.0_Beta1 Twig Development Team Twig 2.0_Beta2 Twig Development Team Twig 2.0_Beta3 Twig Development Team Twig 2.1 Twig Development Team Twig 2.1.1 Twig Development Team Twig 2.2 Twig Development Team Twig 2.2.1 Twig Development Team Twig 2.2.2 Twig Development Team Twig 2.2.3 Twig Development Team Twig 2.3 Twig Development Team Twig 2.3.1 Twig Development Team Twig 2.3.2 Twig Development Team Twig 2.4 Twig Development Team Twig 2.5 Twig Development Team Twig 2.5.1 Twig Development Team Twig 2.6 Twig Development Team Twig 2.6.1	21