CVE-2007-4163

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id…

published August 3, 2007

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id, (2) start_id, (3) row[parent_id], and (4) row[cat_id] parameters to unspecified components, related to use of these parameters within include/utils.php. NOTE: the show_cat.php cat_id vector is already covered by CVE-2007-4069.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01001 · 62.5th percentile
Published
2007-08-03T21:00Z
EPSS history
Timeline
  • 03 AUG 21:00Z
    Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id…
    cvelistv5