CVE-2007-2599

Description

Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or (3) the search parameter to search.php.

References

https://www.exploit-db.com/exploits/3887

https://exchange.xforce.ibmcloud.com/vulnerabilities/34214

http://www.wavelinkmedia.com/scripts/tutorialcms/

http://www.vupen.com/english/advisories/2007/1742

http://www.securityfocus.com/bid/23905

http://secunia.com/advisories/25222

http://osvdb.org/35905

http://osvdb.org/35903

http://osvdb.org/35902

http://osvdb.org/35901

http://osvdb.org/35900

http://osvdb.org/35899

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS