CVE-2007-0789

Опубликовано: 06 фев. 2007

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter.

Ссылки

http://mamboxchange.com/frs/shownotes.php?release_id=6232
URL Repurposed
http://osvdb.org/33088
http://secunia.com/advisories/24044
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0480
Vendor Advisory
http://mamboxchange.com/frs/shownotes.php?release_id=6232
URL Repurposed
http://osvdb.org/33088
http://secunia.com/advisories/24044
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0480
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*

Версия до 4.5.4 (включая)

EPSS

Процентиль: 63%

0.00452

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2007-0789

debian

почти 19 лет назад

SQL injection vulnerability in Mambo before 4.5.5 allows remote attack ...

GHSA-p5fv-vqm7-pqcw

github

больше 3 лет назад