CVE-2007-4114 in SuskunDuygular Uyelik Sistemi

Summary

Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) kadi or (2) email parameter. NOTE: some of these details are obtained from third party information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 07/31/2007
• Disclosure: 07/31/2007
• Moderation: VulDB entry created
• Entries: 1: VDB-38120
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00785
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4114
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4114
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4114/