CVE-2007-2622

2007-05-1116:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.009

Percentile

82.5%

JSON

Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login.php or (2) the taskid parameter to notes.php.

References

osvdb.org/35972

osvdb.org/35973

secunia.com/advisories/25221

www.securityfocus.com/bid/23919

www.vupen.com/english/advisories/2007/1768

exchange.xforce.ibmcloud.com/vulnerabilities/34249

www.exploit-db.com/exploits/3896