Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-4106
HistoryJul 31, 2007 - 10:17 a.m.

CVE-2007-4106

2007-07-3110:17:00
[email protected]
web.nvd.nist.gov
20
cve
2007
4106
sql injection
codewidgets
pay roll
time sheet
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%

JSON

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter.

Affected configurations

NVD
Node
codewidgetspay_roll_-_time_sheet
OR
codewidgetspunch_card

Related

nvd 1
prion 1
cvelist 1
nvd
nvd
CVE-2007-4106
2007-07-31 10:17:00
prion
prion
Sql injection
2007-07-31 10:17:00
cvelist
cvelist
CVE-2007-4106
2007-07-31 10:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%

JSON
Related for CVE-2007-4106
nvd1prion1cvelist1