Unscored CVE-2007-6012 EUVD-2007-5982GHSA-hhpq-j479-x68h

SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ar…

Published Nov 16, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter (aka the search section). NOTE: some of these details are obtained from third party information.

References

docusafe-searchr-sql-injection(38455) vdb-entry
26442 vdb-entry
27660 third-party-advisory
3374 third-party-advisory
20071113 DocuSafe "Search" SQL Injection mailing-list