返回 CVE 瀏覽器

CVE-2007-1015

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1410%

EPSS Percentile21.13th

Published2007年2月21日

Last Modified2026年4月23日

Vulnerability Description

SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms (CPE)

📦

Aktueldownload

Aktueldownload Haber Script

All versions

References & Advisories

🔗 http://www.vupen.com/english/advisories/2007/0620

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32527

🔗 https://www.exploit-db.com/exploits/3318

🔗 http://www.vupen.com/english/advisories/2007/0620

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32527

🔗 https://www.exploit-db.com/exploits/3318

相關漏洞威脅

CVE-2007-10167.5

SQL injection vulnerability in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via certain v...

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...

CVE-2007-195910.0

Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vector...

CVE-2007-020310.0

Multiple unspecified vulnerabilities in phpMyAdmin before 2.9.2-rc1 have unknown impact and attack vectors.