CVE-2007-2622 Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login.php or (2) the taskid parameter to...
HighCVSS 7.5
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login.php or (2) the taskid parameter to notes.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| taskdriver | <= 1.2 | No fix listed |
References
- 35972 vdb-entry
- 35973 vdb-entry
- 25221 third-party-advisory
- 23919 vdb-entry
- ADV-2007-1768 vdb-entry
- taskdriver-login-notes-sql-injection(34249) vdb-entry
- 3896 exploit