CVE-2007-3987

2007-07-2518:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.3%

JSON

SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter.

References

osvdb.org/36277

outlaw.aria-security.info/?p=7

secunia.com/advisories/26169

securityreason.com/securityalert/2925

www.securityfocus.com/archive/1/474419/100/0/threaded

www.securityfocus.com/bid/25010

exchange.xforce.ibmcloud.com/vulnerabilities/35537