CyberSec.Space Logo
Back to CVE Browser

CVE-2007-3298

HIGH
7.5
CVSS Severity Score
EPSS Score0.1190%
EPSS Percentile0.81th
PublishedJun 20, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

SQL injection vulnerability in Spey before 0.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to MessageProcessor.cc and possibly other components.

Affected Platforms (CPE)

📦
Spey

Spey

<= 0.4.0

References & Advisories

🔗 http://osvdb.org/38729
🔗 http://sourceforge.net/forum/forum.php?forum_id=687624
🔗 http://sourceforge.net/project/shownotes.php?group_id=108104&release_id=502366
🔗 http://spey.cvs.sourceforge.net/spey/spey/src/MessageProcessor.cc?view=log
🔗 http://www.vupen.com/english/advisories/2007/2249
🔗 http://osvdb.org/38729
🔗 http://sourceforge.net/forum/forum.php?forum_id=687624
🔗 http://sourceforge.net/project/shownotes.php?group_id=108104&release_id=502366

Related Vulnerabilities

CVE-2005-484710.0

Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes which could l...

CVE-2005-48464.3

Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute...

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...