EUVD-2007-0349

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

This is_eow function in CVSTrac versions before 2.0.1 allows limited SQL injection attacks.

Reporter	Title	Published	Views	Family All 11
Tenable Nessus	CVSTrac < 2.0.1 Text Output Formatter DoS	29 Jan 200700:00	–	nessus
Tenable Nessus	CVSTrac Text Output Formatter SQL Injection DoS	30 Jan 200700:00	–	nessus
CVE	CVE-2007-0347	29 Jan 200720:00	–	cve
Cvelist	CVE-2007-0347	29 Jan 200720:00	–	cvelist
NVD	CVE-2007-0347	29 Jan 200720:28	–	nvd
OpenVAS	CVSTrac < 2.0.1 DoS Vulnerability	24 Oct 200800:00	–	openvas
OpenVAS	CVSTrac text output formatter DoS	24 Oct 200800:00	–	openvas
Prion	Sql injection	29 Jan 200720:28	–	prion
securityvulns	[Full-disclosure] CVSTrac 2.0.0 Denial of Service (DoS) vulnerability	30 Jan 200700:00	–	securityvulns
securityvulns	Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	29 Jan 200700:00	–	securityvulns

[
  {
    "enisaIdVendor": [
      {
        "id": "26f46475-5c6e-35ac-98a5-48321ca867fa",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "b45dc9dd-e8cc-3972-8bfd-64fb967c8172",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
vupen	www.vupen.com/english/advisories/2007/0398
securityreason	www.securityreason.com/securityalert/2192
osvdb	www.osvdb.org/31935
lists	www.lists.grok.org.uk/pipermail/full-disclosure/2007-January/052058.html
securityfocus	www.securityfocus.com/archive/1/458455/100/0/threaded
cvstrac	www.cvstrac.org/cvstrac/chngview
securityfocus	www.securityfocus.com/bid/22296
openpkg	www.openpkg.com/security/advisories/OpenPKG-SA-2007.008.html
secunia	www.secunia.com/advisories/23940
cvstrac	www.cvstrac.org/cvstrac/tktview

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

EPSS0.02284