6.4
CVE-2007-2752
- EPSS 1.17%
- Veröffentlicht 17.05.2007 20:30:00
- Zuletzt bearbeitet 16.06.2026 22:40:14
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Runawaysoft ≫ Haber Portal Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.17% | 0.633 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|
http://osvdb.org/36092
http://secunia.com/advisories/25304
http://www.securityfocus.com/bid/24018
http://www.vupen.com/english/advisories/2007/1853
https://exchange.xforce.ibmcloud.com/vulnerabilities/34491
https://www.exploit-db.com/exploits/3936