← back
CVE-2007-1882

CVE-2007-1882

EPSS 6.1%
qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/3654unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053406.htmlhttp://osvdb.org/34630http://secunia.com/advisories/24730http://securityreason.com/securityalert/2527https://exchange.xforce.ibmcloud.com/vulnerabilities/33385http://www.securitytracker.com/id?1017842http://www.vupen.com/english/advisories/2007/1246