Lucene search
HistoryMar 14, 2007 - 12:19 a.m.
CVE-2007-1445
cve-2007-1445
sql injection
bp blog 7.0
security vulnerability
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.132 Low
EPSS
Percentile
95.6%
SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter.
Affected configurations
Node
betaparticlebetaparticle_blogRange≤7.0.2
ORbetaparticlebetaparticle_blogMatch7.0
Related
prion
prion
Sql injection
2007-03-14 00:19:00
cvelist
cvelist
CVE-2007-1445
2007-03-14 00:00:00
nvd
nvd
CVE-2007-1445
2007-03-14 00:19:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.132 Low
EPSS
Percentile
95.6%
Related for CVE-2007-1445