CVE-2007-6579

EPSS 1.7%

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlan_id parameter to (1) vlanview.php, (2) vlanedit.php, and (3) vlandel.php; the (4) assetclassgroup_id parameter to assetclassgroupview.php; the (5) subnet_id parameter to nodelist.php; and unspecified other vectors. NOTE: it was later reported that the vlanview.php and vlandel.php vectors are also in 0.4.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4771unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/39776 http://osvdb.org/39777 http://osvdb.org/39778 http://osvdb.org/39779 http://osvdb.org/39780 https://www.exploit-db.com/exploits/4771 http://www.inj3ct-it.org/exploit/ipreg0.3.txt http://www.securityfocus.com/bid/26993