high7.5
CVE-2007-4835
SQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action.
Impact
SQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyquote | Phpmyquote | Version 0.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/36947
- http://secunia.com/advisories/26762
- http://securityreason.com/securityalert/3120
- http://www.securityfocus.com/archive/1/478967/100/0/threaded
- http://www.securityfocus.com/bid/25615
- http://yollubunlar.org/phpmyquote-020-version-multiple-sql-and-xss-vulnerabilities-3501.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36514
- http://osvdb.org/36947
- http://secunia.com/advisories/26762
- http://securityreason.com/securityalert/3120
- http://www.securityfocus.com/archive/1/478967/100/0/threaded
- http://www.securityfocus.com/bid/25615
- http://yollubunlar.org/phpmyquote-020-version-multiple-sql-and-xss-vulnerabilities-3501.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36514