Vulnerability Details CVE-2007-6032
SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute arbitrary SQL commands via the mode parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=119323854808780&w=2
- http://packetstormsecurity.org/0710-exploits/aleris-sql.txt
- http://secunia.com/advisories/27396
- http://www.osvdb.org/38169
- http://www.securityfocus.com/bid/26207
- http://marc.info/?l=bugtraq&m=119323854808780&w=2
- http://packetstormsecurity.org/0710-exploits/aleris-sql.txt
- http://secunia.com/advisories/27396
- http://www.osvdb.org/38169
- http://www.securityfocus.com/bid/26207
Products affected by CVE-2007-6032
-
cpe:2.3:a:aleris:web_publishing_server:3.0