CVE-2007-6078

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) nc_top.asp…

published November 21, 2007

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) nc_top.asp; (2) inc_bookmarks.asp, possibly involving a parameter passed from cp_main.asp; (3) inc_profile_functions.asp; or (4) inc_SUBSCRIPTIONS.asp; or the (5) Avatar_URL, (6) LINK1, or (7) LINK2 parameter to cp_main.asp in an EditIt action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01349 · 71.1th percentile
Published
2007-11-21T22:00Z
EPSS history
Timeline
  • 21 NOV 22:00Z
    Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) nc_top.asp…
    cvelistv5