Lucene search

PRIOn knowledge basePRION:CVE-2007-0527

HistoryJan 26, 2007 - 1:28 a.m.

Sql injection

2007-01-2601:28:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

SQL injection vulnerability in the is_remembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBER_KEY cookie parameter. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
website_bakerle2.6.5

CPE	Name	Operator	Version
	website_baker	le	2.6.5

References

osvdb.org/32945

secunia.com/advisories/23828

securityreason.com/securityalert/2185

www.securityfocus.com/archive/1/457684/100/0/threaded

www.securityfocus.com/bid/22176

www.vupen.com/english/advisories/2007/0311

exchange.xforce.ibmcloud.com/vulnerabilities/31692