CVE-2007-0970

Published Feb 16, 2007

Last updated 6 years ago

Overview

Description: Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:webtester:webtester:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FBF33E90-E7A6-4960-9114-E9EFBEA8FCF8",
            "versionEndIncluding": "5.0_2006-09-27"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References