CVE-2007-1696

EPSS 1.2%

SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3556unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/24640 https://exchange.xforce.ibmcloud.com/vulnerabilities/33197 https://www.exploit-db.com/exploits/3556 http://www.osvdb.org/34491 http://www.securityfocus.com/bid/23115 http://www.vupen.com/english/advisories/2007/1098