Unscored CVE-2007-3453 EUVD-2007-3438GHSA-g74r-9q47-hwcj

SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid…

Published Jun 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components.

References

http://www.papoo.de/index/menuid/204/reporeid/215
papoo-unspecified-sql-injection(35031) vdb-entry
20070624 Papoo CMS 3.6 - SQL Injection mailing-list
2843 third-party-advisory
24611 vdb-entry
37543 vdb-entry