CVE-2007-2299 Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) dzial parameter to (a) katalog.php, or the (2) t parameter to....
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) dzial parameter to (a) katalog.php, or the (2) t parameter to (b) forum.php or (c) forum/viewtopic.php, different vectors than CVE-2006-4536.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| frogss cms | <= 0.7 | No fix listed |
References
- 35526 vdb-entry
- 35527 vdb-entry
- 35528 vdb-entry
- 23476 exploit vdb-entry
- ADV-2007-1388 vdb-entry
- frogsscms-katalog-sql-injection(33640) vdb-entry
- 3731 exploit