{"id": "CVE-2007-1469", "bulletinFamily": "NVD", "title": "CVE-2007-1469", "description": "SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.", "published": "2007-03-16T17:19:00", "modified": "2017-07-28T21:30:47", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1469", "reporter": "NVD", "references": ["http://www.securityfocus.com/archive/1/archive/1/462971/100/0/threaded", "http://www.vupen.com/english/advisories/2007/1002", "https://exchange.xforce.ibmcloud.com/vulnerabilities/33005", "http://www.securityfocus.com/bid/22988", "http://securityreason.com/securityalert/2429"], "cvelist": ["CVE-2007-1469"], "type": "cve", "lastseen": "2017-07-29T11:21:55", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:xigla:absolute_image_gallery_xe:2.0"], "cvelist": ["CVE-2007-1469"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.", "edition": 1, "enchantments": {}, "hash": "a4095d3bb44173162d47d5b76153ae9006e5de894f93096fa77e490a21db4fde", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "be4b1bd27dc090f19939773a4caafdb1", "key": "title"}, {"hash": "7b5d640c1240cf6e48ba7404519cea7e", "key": "href"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "5883b9909440fcc4e15a08bdb9a95c8b", "key": "references"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "959ce2362d3b9a94cdd8ac1c932dbefa", "key": "modified"}, {"hash": "36de31b6dbc510a6d69db6bbe83891a0", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "893706d32a41ef2f31fca44003773689", "key": "description"}, {"hash": "70a60ab9677c9a87bc5089d1ff6b5564", "key": "published"}, {"hash": "c4ab5c05eade79a3c906d69cd0dce510", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1469", "id": "CVE-2007-1469", "lastseen": "2016-09-03T08:35:26", "modified": "2011-03-07T21:52:11", "objectVersion": "1.2", "published": "2007-03-16T17:19:00", "references": ["http://www.securityfocus.com/archive/1/archive/1/462971/100/0/threaded", "http://www.vupen.com/english/advisories/2007/1002", "http://www.securityfocus.com/bid/22988", "http://securityreason.com/securityalert/2429", "http://xforce.iss.net/xforce/xfdb/33005"], "reporter": "NVD", "scanner": [], "title": "CVE-2007-1469", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T08:35:26"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "c4ab5c05eade79a3c906d69cd0dce510"}, {"key": "cvelist", "hash": "36de31b6dbc510a6d69db6bbe83891a0"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "893706d32a41ef2f31fca44003773689"}, {"key": "href", "hash": "7b5d640c1240cf6e48ba7404519cea7e"}, {"key": "modified", "hash": "9a36eb097981baabdbd98d0f8654f762"}, {"key": "published", "hash": "70a60ab9677c9a87bc5089d1ff6b5564"}, {"key": "references", "hash": "8b36ba0b2bfe046388b3675a4cced093"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "be4b1bd27dc090f19939773a4caafdb1"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "fbdc7b44560fa1aab6dcdfc2f65719ae766d24c8be095c1a81f0c85fcaf39590", "viewCount": 0, "enchantments": {"vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:xigla:absolute_image_gallery_xe:2.0"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"result": {"osvdb": [{"id": "OSVDB:34239", "type": "osvdb", "title": "Absolute Image Gallery XE gallery.asp categoryid Variable SQL Injection", "description": "## Vulnerability Description\nAbsolute Image Gallery contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'gallery.asp' script not properly sanitizing user-supplied input to the 'categoryid' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nAbsolute Image Gallery contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'gallery.asp' script not properly sanitizing user-supplied input to the 'categoryid' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\n[Secunia Advisory ID:24543](https://secuniaresearch.flexerasoftware.com/advisories/24543/)\nOther Advisory URL: http://milw0rm.com/exploits/3493\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-03/0203.html\nISS X-Force ID: 33005\nFrSIRT Advisory: ADV-2007-1002\n[CVE-2007-1469](https://vulners.com/cve/CVE-2007-1469)\nBugtraq ID: 22988\n", "published": "2007-03-15T11:03:50", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:34239", "cvelist": ["CVE-2007-1469"], "lastseen": "2017-04-28T13:20:30"}], "exploitdb": [{"id": "EDB-ID:3493", "type": "exploitdb", "title": "Absolute Image Gallery 2.0 - gallery.asp categoryid SQL Injection Vuln", "description": "Absolute Image Gallery 2.0 (gallery.asp categoryid) SQL Injection Vuln. CVE-2007-1469. Webapps exploit for asp platform", "published": "2007-03-15T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/3493/", "cvelist": ["CVE-2007-1469"], "lastseen": "2016-01-31T18:36:53"}]}}