CVE-2007-6565 Multiple SQL injection vulnerabilities in Blakord Portal 1.3.A Beta and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to an arbitrary component.
HighCVSS 7.5
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Blakord Portal 1.3.A Beta and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to an arbitrary component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blakord portal | <= 1.3.a_beta | No fix listed |
References
- 3497 third-party-advisory
- 20071226 Blakord Portal <= Beta 1.3.A (all modules) Blind Sql Injection mailing-list
- 27038 exploit vdb-entry
- www.spanish-hackers.com exploit
- blakord-portal-id-sql-injection(39284) vdb-entry
- 4793 exploit