CVEブラウザに戻る

CVE-2007-1015

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1410%

EPSS Percentile21.13th

Published2007年2月21日

Last Modified2026年4月23日

Vulnerability Description

SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms (CPE)

📦

Aktueldownload

Aktueldownload Haber Script

All versions

References & Advisories

🔗 http://www.vupen.com/english/advisories/2007/0620

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32527

🔗 https://www.exploit-db.com/exploits/3318

🔗 http://www.vupen.com/english/advisories/2007/0620

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32527

🔗 https://www.exploit-db.com/exploits/3318

関連する脆弱性情報

CVE-2007-10167.5

SQL injection vulnerability in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via certain v...

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...

CVE-2007-158710.0

templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the...