Unscored CVE-2007-6168 EUVD-2007-6137GHSA-3pw6-qjj9-fvw4

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username pa…

Published Nov 29, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

ADV-2007-3967 vdb-entry
20071121 [Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection mailing-list
26643 vdb-entry
27779 third-party-advisory