10
CVSSv2

CVE-2007-3629

Published: 09/07/2007 Updated: 29/07/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

SQL injection vulnerability in oku.asp in Levent Veysi Portal 1.0 allows remote malicious users to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

levent veysi portal levent veysi portal 1.0

Exploits

source: wwwsecurityfocuscom/bid/24794/info Levent Veysi Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database This ...