VulnerabilityModified
CVE-2007-4114
Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) kadi or (2) email parameter.
HIGH 7.5EPSS 1.35%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) kadi or (2) email parameter. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 1.35% probability · 70th percentile
- CISA KEV
- Not listed
- Affected
- suskunduygular/suskunduygular uyelik sistemi
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/26260Vendor Advisory
- http://securityreason.com/securityalert/2945
- http://www.securityfocus.com/archive/1/474929/100/0/threaded
- http://www.securityfocus.com/bid/25108Exploit
- http://www.vupen.com/english/advisories/2007/2720
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35666
- http://secunia.com/advisories/26260Vendor Advisory
- http://securityreason.com/securityalert/2945
- http://www.securityfocus.com/archive/1/474929/100/0/threaded
- http://www.securityfocus.com/bid/25108Exploit
- http://www.vupen.com/english/advisories/2007/2720
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35666
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.