Olatedownload@3.4.1 Security Vulnerabilities and Issues — Olatedownload@3.4.1 CVE List

Lucene search

OlateOlatedownload3.4.1

3 matches found

CVE•added 2007/08/18 9:17 p.m.•42 views

CVE-2007-4419

Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.

9.3CVSS6.9AI score0.09079EPSS

CVE•added 2007/08/18 9:17 p.m.•34 views

CVE-2007-4421

SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie.

9.3CVSS8.4AI score0.02726EPSS

CVE•added 2007/08/21 6:17 p.m.•33 views

CVE-2007-4454

Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.

6.8CVSS7.6AI score0.00822EPSS