7.5

CVE-2007-3648

EPSS 0.45%
Veröffentlicht 10.07.2007 17:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/admin_album.php and admin/admin_downloads.php.  NOTE: some of these details are obtained from third party information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Valarsoft ≫ Webmatic Version <= 2.6

Valarsoft ≫ Webmatic Version2.6.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.629

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://osvdb.org/41104

http://secunia.com/advisories/26019

http://www.securityfocus.com/bid/24878

http://www.valarsoft.com/index.php?page=home&notizie=&notID=144#npos144

Patch

http://www.vupen.com/english/advisories/2007/2465

https://nvd.nist.gov/vuln/detail/CVE-2007-3648

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3648

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3648

EUVD