CVE-2007-2429 in PasswordManager Proinfo

Summary

ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecting a certain command line for the mysql program, as demonstrated by the "-port 2345" and "-u root" arguments. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

05/01/2007

Disclosure

05/01/2007

Entries

1: VDB-36542

CPE

ready

Exploit

Download

CVSS

9.8

EPSS

0.05405

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!