CVE-2007-3119

EPSS 1.2%

SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote attackers to execute arbitrary SQL commands via the news_id parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4040unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/37170 http://secunia.com/advisories/25565 https://exchange.xforce.ibmcloud.com/vulnerabilities/34756 https://www.exploit-db.com/exploits/4040 http://www.securityfocus.com/bid/24362 http://www.vupen.com/english/advisories/2007/2098