Lucene search
HistoryAug 20, 2007 - 10:17 p.m.
CVE-2007-4435
cve-2007-4435
sql injection
torrenttrader
remote attack
arbitrary commands
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.6%
Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.
Affected configurations
Node
torrenttradertorrenttraderRange≤1.06
| CPE | Name | Operator | Version |
|---|---|---|---|
| torrenttrader:torrenttrader | torrenttrader | le | 1.06 |
Related
nvd
nvd
CVE-2007-4435
2007-08-20 22:17:00
cvelist
cvelist
CVE-2007-4435
2007-08-20 22:00:00
prion
prion
Sql injection
2007-08-20 22:17:00
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.6%
Related for CVE-2007-4435