Lucene search
HistoryFeb 16, 2007 - 1:28 a.m.
CVE-2007-0970
cve
sql injection
webtester
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input.
Affected configurations
Node
webtesterwebtesterRange≤5.0_2006-09-27
| CPE | Name | Operator | Version |
|---|---|---|---|
| webtester:webtester | webtester | le | 5.0_2006-09-27 |
Related
nvd
nvd
CVE-2007-0970
2007-02-16 01:28:00
prion
prion
Sql injection
2007-02-16 01:28:00
cvelist
cvelist
CVE-2007-0970
2007-02-16 01:00:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
Related for CVE-2007-0970