7.5
CVE-2007-0631
- EPSS 1.2%
- Veröffentlicht 31.01.2007 18:28:00
- Zuletzt bearbeitet 16.06.2026 22:35:57
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eclectic Designs ≫ Cascadianfaq Version <= 4.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.2% | 0.64 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/23965
http://www.osvdb.org/31675
http://www.securityfocus.com/bid/22314
http://www.vupen.com/english/advisories/2007/0424
https://exchange.xforce.ibmcloud.com/vulnerabilities/31968
https://www.exploit-db.com/exploits/3227