CVE-2007-0347

The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated users to…

published January 29, 2007

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated users to execute limited SQL injection attacks and cause a denial of service (database error) via a ' character in certain messages, tickets, or Wiki entries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03688 · 89.6th percentile
Published
2007-01-29T20:00Z
EPSS history
Timeline
  • 29 JAN 20:00Z
    The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated users to…
    cvelistv5