CVE-2007-3648 SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to adm...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/admin_album.php and admin/admin_downloads.php. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| valarsoft webmatic | <= 2.6 | No fix listed |
| valarsoft webmatic | = 2.6.1 | No fix listed |
References
- 41104 vdb-entry
- 26019 third-party-advisory
- 24878 vdb-entry
- www.valarsoft.com patch
- ADV-2007-2465 vdb-entry