CVE-2007-3809 - Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action to directory.php, and other unspecified vectors

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action to directory.php, and other unspecified vectors

Published Jul 17, 2007

7.5

HIGH

CVSS 2.0

EPSS 1.03%

Description

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action to directory.php, and other unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://osvdb.org/36512
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/24915
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/35425
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4185
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/36512		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/24915		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/35425		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4185		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 17, 2007

Updated Aug 7, 2024

Reserved Jul 16, 2007

Link CVE-2007-3809

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-3809

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-3809