CVE-2007-3909

2007-07-1917:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.006

Percentile

78.1%

JSON

Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors.

References

secunia.com/advisories/26202

www.osvdb.org/38268

www.portcullis-security.com/uplds/advisories/Bandersnatch%20-%2007-006.txt

www.securityfocus.com/bid/25094

exchange.xforce.ibmcloud.com/vulnerabilities/35406