7.5
CVE-2007-3811
- EPSS 1.2%
- Veröffentlicht 17.07.2007 00:30:00
- Zuletzt bearbeitet 16.06.2026 22:42:46
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php or (2) the name parameter to page.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Esyndicat ≫ Esyndicat Directory Version1.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.2% | 0.64 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://osvdb.org/36266
http://osvdb.org/36267
http://www.securityfocus.com/bid/24908
http://www.vupen.com/english/advisories/2007/2543
https://exchange.xforce.ibmcloud.com/vulnerabilities/35427
https://www.exploit-db.com/exploits/4183