CVE-2007-0847 in Open Tibia Server CMS

Riassunto

di MITRE

SQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to priv.php.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 08/02/2007
• Divulgazione: 08/02/2007
• Moderazione: accettato
• Voce: VDB-34919
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.01047
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-0847
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-0847
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-0847/