CVE-2007-6004 Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an artikel action or (2) the katid parameter...
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an artikel action or (2) the katid parameter in a produk action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| toko instan | = 7.6 | No fix listed |
References
- 26433 vdb-entry
- ADV-2007-3906 vdb-entry
- tokoinstan-index-sql-injection(38449) vdb-entry
- 4623 exploit