Unscored CVE-2007-0339 EUVD-2007-0341GHSA-rm8v-r7vp-jr6x

SQL injection vulnerability in index.php (aka the login form) in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary …

Published Jan 18, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php (aka the login form) in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field (ps parameter). NOTE: some of these details are obtained from third party information.

References

32832 vdb-entry
23766 third-party-advisory
20070117 Source VERIFY of SMe FileMailer 1.21 SQL injection mailing-list
2154 third-party-advisory
20070116 [x0n3-h4ck] SmE FileMailer 1.21 Remote Sql Injextion Exploit mailing-list