Vulnerability Details CVE-2007-1882
qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.107
EPSS Ranking 93.3%
CVSS Severity
CVSS v2 Score 6.5
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053406.html
- http://osvdb.org/34630
- http://secunia.com/advisories/24730
- http://securityreason.com/securityalert/2527
- http://www.securitytracker.com/id?1017842
- http://www.vupen.com/english/advisories/2007/1246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33385
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053406.html
- http://osvdb.org/34630
- http://secunia.com/advisories/24730
- http://securityreason.com/securityalert/2527
- http://www.securitytracker.com/id?1017842
- http://www.vupen.com/english/advisories/2007/1246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33385
Products affected by CVE-2007-1882
-
cpe:2.3:a:hp:mercury_quality_center:9.0