CVE-2007-1122
medium · 6.4Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 and 1.01 allow remote attackers to execute arbitrary SQL commands via the id parameter to the (1) updateRow and (2) deleteRow functions in functions.php, a variant of a SQL injection issue that was fixed in 1.01. NOTE: some of these details are obtained from third party information.
6.4
CVSS
14.9%
EPSS (exploit prob.)
97th
EPSS percentile
2007-02-27
Published
AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| zephyrsoft_toolbox | address_book_continued | 1.00 |
| zephyrsoft_toolbox | address_book_continued | 1.01 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/24269
- http://sourceforge.net/project/downloading.php?group_id=153333&use_mirror=osdn&filename=abc-1.02.zip
- http://www.securityfocus.com/bid/22685
- http://www.vupen.com/english/advisories/2007/0715
- http://secunia.com/advisories/24269
- http://sourceforge.net/project/downloading.php?group_id=153333&use_mirror=osdn&filename=abc-1.02.zip
- http://www.securityfocus.com/bid/22685
- http://www.vupen.com/english/advisories/2007/0715
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-1122