CVE-2007-0140 - SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary SQL commands via the id parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Jan 9, 2007

7.5

HIGH

CVSS 2.0

EPSS 1.28%

Description

SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://osvdb.org/31625
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/23645
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/2122
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/456068/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21889
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2007/0079
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/31320
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/31625		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/23645		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/2122		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/456068/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21889		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2007/0079		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/31320		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 9, 2007

Updated Aug 7, 2024

Reserved Jan 9, 2007

Link CVE-2007-0140

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-0140

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-0140