CVE-2007-5679 SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page (build_media_content.php). NOT...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page (build_media_content.php). NOTE: it was later reported that 0.7.4 is also affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deeemm dmcms | = 0.7.0-beta | No fix listed |
| deeemm dmcms | = 0.7.4 | No fix listed |
References
- 20071021 [Aria-Security.Net] dmcms.0.7.0 SQL Injection exploit mailing-list
- 26169 exploit vdb-entry
- ADV-2008-2411 vdb-entry vendor-advisory
- dmcms-index-sql-injection(37337) vdb-entry
- dmcms-page-id-sql-injection(44506) vdb-entry
- 6250 exploit