Lucene search

[email protected]CVE-2007-6566

HistoryDec 28, 2007 - 9:46 p.m.

CVE-2007-6566

2007-12-2821:46:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

xzero community classifieds

post.php

nvd

cve-2007-6566

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.6%

JSON

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php.

Affected configurations

NVD

Node

xzero_scriptsxzero_community_classifiedsMatch4.95.11

CPENameOperatorVersion
xzero_scripts:xzero_community_classifiedsxzero scripts xzero community classifiedseq4.95.11

CPE	Name	Operator	Version
xzero_scripts:xzero_community_classifieds	xzero scripts xzero community classifieds	eq	4.95.11

References

en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst

osvdb.org/39740

secunia.com/advisories/28250

www.securityfocus.com/archive/1/485545/100/0/threaded

www.securityfocus.com/bid/27042

exchange.xforce.ibmcloud.com/vulnerabilities/39259

www.exploit-db.com/exploits/4794

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.6%

JSON

Related for CVE-2007-6566

prion1 cvelist1 nvd1