CVE-2007-1612
published 2007-03-23CVE-2007-1612: SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the kolumna…
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.22%
65.0th percentile
SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the kolumna parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| katalog_plyt_audio | katalog_plyt_audio | <= 1.0 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-37f8-3cvh-9hjg: Multiple SQL injection vulnerabilities in index
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-1656 [HIGH] GHSA-37f8-3cvh-9hjg: Multiple SQL injection vulnerabilities in index
Multiple SQL injection vulnerabilities in index.php in Katalog Plyt Audio 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fraza and (2) litera parameters, different vectors than CVE-2007-1612. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
GHSA
GHSA-r475-v64j-f6qj: SQL injection vulnerability in index
ghsa_unreviewed·2022-05-01
CVE-2007-1612 [HIGH] GHSA-r475-v64j-f6qj: SQL injection vulnerability in index
SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the kolumna parameter.
Red Hat
squid: regression in SQUID-2007:2 / CVE-2007-6239
vendor_redhat·2008-03-22·CVSS 5.0
CVE-2008-1612 [MEDIUM] squid: regression in SQUID-2007:2 / CVE-2007-6239
squid: regression in SQUID-2007:2 / CVE-2007-6239
The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.
No detection rules found.
http://osvdb.org/34269http://secunia.com/advisories/24539http://www.securityfocus.com/bid/23024http://www.vupen.com/english/advisories/2007/1015https://exchange.xforce.ibmcloud.com/vulnerabilities/33048https://www.exploit-db.com/exploits/3513http://osvdb.org/34269http://secunia.com/advisories/24539http://www.securityfocus.com/bid/23024http://www.vupen.com/english/advisories/2007/1015https://exchange.xforce.ibmcloud.com/vulnerabilities/33048https://www.exploit-db.com/exploits/3513
2007-03-23
Published