CVE-2007-6551 SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailmachinepro mailmachine pro | <= 2.2.5 | No fix listed |
| mailmachinepro mailmachine pro | = 1.0 | No fix listed |
| mailmachinepro mailmachine pro | = 2.0 | No fix listed |
| mailmachinepro mailmachine pro | = 2.1 | No fix listed |
| mailmachinepro mailmachine pro | = 2.2.4 | No fix listed |
References
- 39638 vdb-entry
- 28232 third-party-advisory vendor-advisory
- 20080108 Vendor ACK for CVE-2007-6551 (MailMachine Pro SQL injection) mailing-list
- www.inj3ct-it.org
- 27030 vdb-entry
- mailmachinepro-showMsg-sql-injection(39211) vdb-entry
- 4788 exploit