CVE-2007-4952

Description

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917.

References

https://www.exploit-db.com/exploits/4418

http://www.securityfocus.com/bid/25692

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS