CVE-2007-6012 SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter (aka the search section). NOTE: some of these d...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter (aka the search section). NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gatesoft docusafe | = 4.1.0 | No fix listed |
| gatesoft docusafe | = 4.1.2 | No fix listed |
References
- 27660 third-party-advisory vendor-advisory
- 3374 third-party-advisory
- 20071113 DocuSafe "Search" SQL Injection mailing-list
- 26442 vdb-entry
- docusafe-searchr-sql-injection(38455) vdb-entry