CVE-2007-6078

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.3%

exploitation probability

1.3%top 31% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) nc_top.asp; (2) inc_bookmarks.asp, possibly involving a parameter passed from cp_main.asp; (3) inc_profile_functions.asp; or (4) inc_SUBSCRIPTIONS.asp; or the (5) Avatar_URL, (6) LINK1, or (7) LINK2 parameter to cp_main.asp in an EditIt action.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4638

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/38595 https://www.exploit-db.com/exploits/4638 http://www.kb.cert.org/vuls/id/315107 http://www.securityfocus.com/bid/26504