CVE-2007-0970

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.7%

from disclosure to weapon0 days

Published on NVDFeb 16

1st PoCFeb 14

exploitation probability

1.7%top 24% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/29602

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/33203 http://osvdb.org/33204 http://secunia.com/advisories/24157 http://securityreason.com/securityalert/2261 https://exchange.xforce.ibmcloud.com/vulnerabilities/32490 http://www.securityfocus.com/archive/1/460078/100/0/threaded http://www.securityfocus.com/bid/22559 http://www.vupen.com/english/advisories/2007/0633