Lucene search
HistoryJul 11, 2007 - 5:30 p.m.
CVE-2007-3691
cve-2007-3691
sql injection
changepw.php
av tutorial script
security vulnerability
nvd
8.8 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
54.8%
Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) userid parameters, a different issue than CVE-2007-3630.
| CPE | Name | Operator | Version |
|---|---|---|---|
| av_scripts:av_tutorial_script | av scripts av tutorial script | eq | 1.0 |
Related
prion
prion
Sql injection
2007-07-11 17:30:00
Default credentials
2007-07-10 00:30:00
cve
cve
CVE-2007-3630
2007-07-10 00:30:00
8.8 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
54.8%
Related for CVE-2007-3691