Unscored CVE-2007-5425 EUVD-2007-5401GHSA-ppc8-8hw8-wp4w

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the…

Published Oct 12, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131.

References

20071010 Vulnerabilities digest mailing-list
3216 third-party-advisory
45486 vdb-entry
activekb-questid-sql-injection(38202) vdb-entry
http://securityvulns.ru/Rdocument901.html