CVE-2007-6559

Description

Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via (1) the from parameter to index.php or (2) the page parameter to update.php.

References

http://www.securityfocus.com/archive/1/490101/100/0/threaded

http://www.securityfocus.com/archive/1/485480/100/0/threaded

http://securityreason.com/securityalert/3496

http://secunia.com/advisories/28263

http://osvdb.org/39791

http://osvdb.org/39790

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS