Lucene search

K
cve[email protected]CVE-2007-4056
HistoryJul 30, 2007 - 5:30 p.m.

CVE-2007-4056

2007-07-3017:30:00
CWE-89
web.nvd.nist.gov
20
cve-2007-4056
sql injection
prozilla
adult directory
directory.php
remote attackers
sql commands

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.5%

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. NOTE: the original report indicated that this was the β€œphoto” SourceForge project (aka Maan Bsat Photo Collection), but that was incorrect.

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.5%

Related for CVE-2007-4056