CVE-2007-4110

EPSS 1.2%

SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/30426unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://outlaw.aria-security.info/?p=10 http://secunia.com/advisories/26245 http://securityreason.com/securityalert/2936 https://exchange.xforce.ibmcloud.com/vulnerabilities/35661 http://www.securityfocus.com/archive/1/474937/100/0/threaded http://www.securityfocus.com/bid/25113