Lucene search

[email protected]CVE-2007-2207

HistoryApr 24, 2007 - 8:19 p.m.

CVE-2007-2207

2007-04-2420:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-2207

sql injection

ripe website manager

contact form security

vulnerability

nvd

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.0%

JSON

SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter.

CPENameOperatorVersion
ripe_website_manager:ripe_website_managerripe website managerle0.8.4

CPE	Name	Operator	Version
ripe_website_manager:ripe_website_manager	ripe website manager	le	0.8.4

References

john-martinelli.com/work/ripe.txt

osvdb.org/35363

secunia.com/advisories/24984

securityreason.com/securityalert/2602

www.securityfocus.com/archive/1/466673/100/0/threaded

www.securityfocus.com/bid/23597

www.vupen.com/english/advisories/2007/1519

exchange.xforce.ibmcloud.com/vulnerabilities/33818

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.0%

JSON

Related for CVE-2007-2207

prion1