CVE-2007-3065 in Particle Gallery

Riassunto

di MITRE

SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the editcomment parameter, a different version and vector than CVE-2006-2862.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 05/06/2007
• Divulgazione: 05/06/2007
• Moderazione: accettato
• Voce: VDB-37130
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.01047
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Police, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-3065
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-3065
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-3065/