CVE-2007-6392

EPSS 1.0%

SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4708unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/27990 https://exchange.xforce.ibmcloud.com/vulnerabilities/38938 https://www.exploit-db.com/exploits/4708 http://www.securityfocus.com/bid/26779 http://www.vupen.com/english/advisories/2007/4177