CVE-2007-4437

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information.

Link	Resource
http://www.ampache.org/announce/3_3_3_5.php	Patch
http://secunia.com/advisories/26542	Patch Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=189607
http://security.gentoo.org/glsa/glsa-200710-13.xml
http://www.securityfocus.com/bid/25362
http://secunia.com/advisories/27253
http://osvdb.org/38276
https://exchange.xforce.ibmcloud.com/vulnerabilities/36121

Configuration 1

cpe:2.3:a:ampache:ampache:*:*:*:*:*:*:*:*

---

Published : 2007-08-20 10:17

Updated : 2017-07-29 01:32

---

NVD link : CVE-2007-4437

Mitre link : CVE-2007-4437

No products.

NVD-CWE-Other