CVE-2007-6551

SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter.

Link	Resource
http://www.inj3ct-it.org/exploit/MailMachine%20Pro%202.2.4.txt
http://www.attrition.org/pipermail/vim/2008-January/001873.html
http://www.securityfocus.com/bid/27030
http://secunia.com/advisories/28232	Vendor Advisory
http://osvdb.org/39638
https://exchange.xforce.ibmcloud.com/vulnerabilities/39211
https://www.exploit-db.com/exploits/4788

Configuration 1

cpe:2.3:a:mailmachinepro:mailmachine_pro:1.0:*:*:*:*:*:*:* cpe:2.3:a:mailmachinepro:mailmachine_pro:2.2.4:*:*:*:*:*:*:* cpe:2.3:a:mailmachinepro:mailmachine_pro:2.1:*:*:*:*:*:*:* cpe:2.3:a:mailmachinepro:mailmachine_pro:2.0:*:*:*:*:*:*:* cpe:2.3:a:mailmachinepro:mailmachine_pro:*:*:*:*:*:*:*:*

---

Published : 2007-12-28 12:46

Updated : 2017-09-29 01:29

---

NVD link : CVE-2007-6551

Mitre link : CVE-2007-6551

No products.

CWE-89