7.5
CVE-2007-1629
- EPSS 1.04%
- Veröffentlicht 23.03.2007 21:19:00
- Zuletzt bearbeitet 16.06.2026 22:37:59
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Active Web Softwares ≫ Active Photo Gallery Version6.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.04% | 0.595 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/24568
http://www.securityfocus.com/bid/23077
http://www.vupen.com/english/advisories/2007/1072
https://exchange.xforce.ibmcloud.com/vulnerabilities/33129
https://www.exploit-db.com/exploits/3536