7.5
CVE-2007-2004
- EPSS 1.02%
- Veröffentlicht 12.04.2007 19:19:00
- Zuletzt bearbeitet 16.06.2026 22:38:43
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in InoutMailingListManager 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to changename.php and other unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Inoutmailinglistmanager ≫ Inoutmailinglistmanager Version <= 3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.02% | 0.589 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
https://www.exploit-db.com/exploits/3702
http://secunia.com/advisories/24842
http://www.vupen.com/english/advisories/2007/1345