CVE-2007-3175

critical

Description

Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft parameter to mailer.w2b or (2) the listDocPay parameter to DocPay.w2b.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34593

http://pridels-team.blogspot.com/2007/05/w2b-online-banking-vuln.html

http://osvdb.org/37467

http://osvdb.org/37466

Details

Source: Mitre, NVD

Published: 2007-06-11

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.16683

Detections

Analytics