high7.5
CVE-2007-6012
SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter (aka t…
Impact
SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter (aka the search section). NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gatesoft | Docusafe | Versions 4.1.0, 4.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/27660
- http://securityreason.com/securityalert/3374
- http://www.securityfocus.com/archive/1/483694/100/0/threaded
- http://www.securityfocus.com/bid/26442
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38455
- http://secunia.com/advisories/27660
- http://securityreason.com/securityalert/3374
- http://www.securityfocus.com/archive/1/483694/100/0/threaded
- http://www.securityfocus.com/bid/26442
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38455