CVE-2007-1250 SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 7.5
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| angel learning learning management suite | = 7.1 | No fix listed |
References
- 33846 vdb-entry
- 24368 third-party-advisory vendor-advisory
- 20070301 Angel LMS 7.1 - Remote SQL Injection mailing-list
- 20070301 Re: Angel LMS 7.1 - Remote SQL Injection mailing-list
- 20070301 [Fwd: Re: Angel LMS 7.1 - Remote SQL Injection] mailing-list
- 22768 vdb-entry
- ADV-2007-0807 vdb-entry
- angellms-default-sql-injection(32756) vdb-entry
- 3390 exploit