CVE-2007-1712

Exploit

EPSS 0.64%
Published 27.03.2007 21:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Active Web Softwares ≫ Active Auction House Version7.1 Editionpro

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.64%	0.696

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/24626

Vendor Advisory

Exploit

http://www.osvdb.org/34420

http://www.vupen.com/english/advisories/2007/1097

https://exchange.xforce.ibmcloud.com/vulnerabilities/33182

https://www.exploit-db.com/exploits/3551

https://nvd.nist.gov/vuln/detail/CVE-2007-1712

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1712

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1712

EUVD