Vulnerabilities > CVE-2007-3402 - SQL Injection vulnerability in Pagetool 1.07

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
pagetool
exploit available
NVD
Published: 2007-06-26
Updated: 2018-10-16

Summary

SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a pagetool_news action.

Vulnerable Configurations

Part Description Count
Application
Pagetool
1

Exploit-Db

descriptionPagetool 1.07 (news_id) Remote SQL Injection Vulnerability. CVE-2007-3402. Webapps exploit for php platform
fileexploits/php/webapps/4107.txt
idEDB-ID:4107
last seen2016-01-31
modified2007-06-25
platformphp
port
published2007-06-25
reporterKatatafish
sourcehttps://www.exploit-db.com/download/4107/
titlePagetool 1.07 news_id Remote SQL Injection Vulnerability
typewebapps

References