Unscored CVE-2007-3783 EUVD-2007-3767GHSA-7939-9gq4-g76m

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in …

Published Jul 15, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4.

References

envivocms-default-sql-injection(35342) vdb-entry
2897 third-party-advisory
36246 vdb-entry
26020 third-party-advisory
20070711 durito: enVivo!CMS SQL injection mailing-list
20070711 durito: enVivo!CMS SQL injection mailing-list
http://securityvulns.ru/Rdocument425.html
ADV-2007-2503 vdb-entry