CVEvulnerability
CVE-2007-1425
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the list parameter in an archive action.
Affected configurations
• triexa sonicmailer pro (<= 3.2.3)
References
- http://osvdb.org/33986 osvdb.org
- http://secunia.com/advisories/24474 Vendor Advisory
- http://www.securityfocus.com/bid/22920 Exploit
- http://www.vupen.com/english/advisories/2007/0905 www.vupen.com
- https://www.exploit-db.com/exploits/3457 www.exploit-db.com
- http://osvdb.org/33986 osvdb.org
- http://secunia.com/advisories/24474 Vendor Advisory
- http://www.securityfocus.com/bid/22920 Exploit
- http://www.vupen.com/english/advisories/2007/0905 www.vupen.com
- https://www.exploit-db.com/exploits/3457 www.exploit-db.com