CVE-2007-3987 SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| junction quest image racer | = 1.0 | No fix listed |
References
- 36277 vdb-entry
- outlaw.aria-security.info exploit
- 26169 third-party-advisory vendor-advisory
- 2925 third-party-advisory
- 20070722 [Aria-Security] Image Racer SearchResults.asp SQL INJECTION vuln. mailing-list
- 25010 vdb-entry
- imageracer-searchresults-sql-injection(35537) vdb-entry