Vulnerabilities > CVE-2007-3824 - SQL Injection vulnerability in MzK Blog Katgoster.ASP

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
mehmet-zati-karahan
critical
exploit available
NVD
Published: 2007-07-17
Updated: 2017-07-29

Summary

SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands via the katID parameter.

Vulnerable Configurations

Part Description Count
Application
Mehmet_Zati_Karahan
1

Exploit-Db

descriptionMzK Blog Katgoster.ASP SQL Injection Vulnerability. CVE-2007-3824. Webapps exploit for asp platform
idEDB-ID:30300
last seen2016-02-03
modified2007-03-23
published2007-03-23
reporterGeFORC3
sourcehttps://www.exploit-db.com/download/30300/
titleMzK Blog Katgoster.ASP SQL Injection Vulnerability

References