CVE-2007-1445

Description

SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter.

References

https://www.exploit-db.com/exploits/3466

http://www.vupen.com/english/advisories/2007/0919

http://secunia.com/advisories/24473

http://osvdb.org/33997

http://blog.betaparticle.com/template_permalink.asp?id=134

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS