VulnerabilityModified
CVE-2007-5141
SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter.
MEDIUM 6.8EPSS 1.09%
Does this matter?
Lower severity and a low EPSS score (1.09%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.09% probability · 63th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- sitex/sitex cms
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/3178
- http://www.securityfocus.com/archive/1/480814/100/0/threaded
- http://www.waraxe.us/advisory-55.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36836
- http://securityreason.com/securityalert/3178
- http://www.securityfocus.com/archive/1/480814/100/0/threaded
- http://www.waraxe.us/advisory-55.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36836
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.