CVE-2007-3631 SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the params parameter, related to missing input validation...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the params parameter, related to missing input validation of the id field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gamesitescript | <= 3.1 | No fix listed |
References
- 36362 vdb-entry
- 25983 third-party-advisory
- 24807 vdb-entry
- ADV-2007-2460 vdb-entry
- gamesitescript-params-sql-injection(35292) vdb-entry
- 4159 exploit