CVE-2007-3990 SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the....
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asp indir dora emlak | = 1.0 | No fix listed |
References
- 26173 third-party-advisory vendor-advisory
- 25004 vdb-entry
- ADV-2007-2605 vdb-entry
- doraemlakscript-default-sql-injection(35555) vdb-entry