Vulnerabilities > CVE-2007-4332 - Input Validation vulnerability in Article Dashboard

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
article-dashboard

Summary

SQL injection vulnerability in article.php in Article Dashboard, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Enable "magic_quotes_gpc" and filter malicious characters and character sequences in a web proxy.

Vulnerable Configurations

Part Description Count
Application
Article_Dashboard
1