CVE-2007-5679

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page (build_media_content.php). NOTE: it was later reported that 0.7.4 is also affected.

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2007-10/0315.html	Exploit
http://www.securityfocus.com/bid/26169/info	Exploit
http://www.vupen.com/english/advisories/2008/2411	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44506
https://exchange.xforce.ibmcloud.com/vulnerabilities/37337
https://www.exploit-db.com/exploits/6250

Configuration 1

cpe:2.3:a:deeemm:dmcms:0.7.0:beta:*:*:*:*:*:* cpe:2.3:a:deeemm:dmcms:0.7.4:*:*:*:*:*:*:*

---

Published : 2007-10-25 12:46

Updated : 2017-09-29 01:29

---

NVD link : CVE-2007-5679

Mitre link : CVE-2007-5679

No products.

CWE-89