CVEvulnerability
CVE-2007-1445
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter.
Affected configurations
• betaparticle betaparticle blog (<= 7.0.2)
• betaparticle betaparticle blog 7.0
References
- http://blog.betaparticle.com/template_permalink.asp?id=134 Patch
- http://osvdb.org/33997 osvdb.org
- http://secunia.com/advisories/24473 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0919 www.vupen.com
- https://www.exploit-db.com/exploits/3466 www.exploit-db.com
- http://blog.betaparticle.com/template_permalink.asp?id=134 Patch
- http://osvdb.org/33997 osvdb.org
- http://secunia.com/advisories/24473 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0919 www.vupen.com
- https://www.exploit-db.com/exploits/3466 www.exploit-db.com