CVE-2007-3573 Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the (1) acparentid or (2) acitemid parameter to an unspecified component, different ve...
MediumCVSS 6.8
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the (1) acparentid or (2) acitemid parameter to an unspecified component, different vectors than CVE-2006-1421.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| akocomment | All versions | No fix listed |
References
- 38914 vdb-entry
- 2860 third-party-advisory
- 20070629 akocomment SQL INJECTION (all version) mailing-list