Lucene search

[email protected]CVE-2007-0202

HistoryJan 11, 2007 - 11:28 a.m.

CVE-2007-0202

2007-01-1111:28:00

[email protected]

web.nvd.nist.gov

cve-2007-0202

sql injection

index.php

@lex guestbook 4.0.2

security vulnerability

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter.

Affected configurations

NVD

Node

alexphpteamalex_guestbookMatch3.12

alexphpteamalex_guestbookMatch3.13

alexphpteamalex_guestbookMatch4.0.1

alexphpteamalex_guestbookMatch4.0.2

CPENameOperatorVersion
alexphpteam:alex_guestbookalexphpteam alex guestbookeq3.12
alexphpteam:alex_guestbookalexphpteam alex guestbookeq3.13
alexphpteam:alex_guestbookalexphpteam alex guestbookeq4.0.1
alexphpteam:alex_guestbookalexphpteam alex guestbookeq4.0.2

CPE	Name	Operator	Version
alexphpteam:alex_guestbook	alexphpteam alex guestbook	eq	3.12
alexphpteam:alex_guestbook	alexphpteam alex guestbook	eq	3.13
alexphpteam:alex_guestbook	alexphpteam alex guestbook	eq	4.0.1
alexphpteam:alex_guestbook	alexphpteam alex guestbook	eq	4.0.2

References

acid-root.new.fr/poc/20070107.txt

osvdb.org/31707

secunia.com/advisories/23637

securityreason.com/securityalert/2135

www.securityfocus.com/archive/1/456218/100/0/threaded

www.securityfocus.com/bid/21926

www.vupen.com/english/advisories/2007/0137

exchange.xforce.ibmcloud.com/vulnerabilities/31393

www.exploit-db.com/exploits/3103

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON

Related for CVE-2007-0202

nvd1 prion1 cvelist1 securityvulns1