Vulnerability Details CVE-2007-0794
SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: this issue has been disputed by a reliable third party, who states that inc/common.php only contains function definitions
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/33670
- http://www.securityfocus.com/archive/1/459151/100/0/threaded
- http://www.securityfocus.com/archive/1/459180/100/0/threaded
- http://www.securityfocus.com/archive/1/481327/100/100/threaded
- http://osvdb.org/33670
- http://www.securityfocus.com/archive/1/459151/100/0/threaded
- http://www.securityfocus.com/archive/1/459180/100/0/threaded
- http://www.securityfocus.com/archive/1/481327/100/100/threaded
Products affected by CVE-2007-0794
-
cpe:2.3:a:globalmegacorp:dvddb:0.6