CVEvulnerability

CVE-2007-1363

7.5 HIGH Published 2007-04-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-04-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php.

Affected configurations

• dropafew dropafew (<= 0.2)

References

http://secunia.com/advisories/24861 Vendor Advisory
http://www.cynops.de/advisories/CVE-2007-1363.txt Vendor Advisory
http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437 Patch
http://www.securityfocus.com/bid/23400 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33560 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/24861 Vendor Advisory
http://www.cynops.de/advisories/CVE-2007-1363.txt Vendor Advisory
http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437 Patch
http://www.securityfocus.com/bid/23400 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33560 exchange.xforce.ibmcloud.com