CVE-2007-3214

EPSS 1.1%

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the template parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4054unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36607 http://secunia.com/advisories/25605 https://exchange.xforce.ibmcloud.com/vulnerabilities/34793 https://www.exploit-db.com/exploits/4054 http://www.securityfocus.com/bid/24398 http://www.vupen.com/english/advisories/2007/2123