CVEvulnerability
CVE-2007-3298
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in Spey before 0.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to MessageProcessor.cc and possibly other components.
Affected configurations
• spey spey (<= 0.4.0)
References
- http://osvdb.org/38729 osvdb.org
- http://sourceforge.net/forum/forum.php?forum_id=687624 Patch
- http://sourceforge.net/project/shownotes.php?group_id=108104&release_id=502366 sourceforge.net
- http://spey.cvs.sourceforge.net/spey/spey/src/MessageProcessor.cc?view=log spey.cvs.sourceforge.net
- http://www.vupen.com/english/advisories/2007/2249 www.vupen.com
- http://osvdb.org/38729 osvdb.org
- http://sourceforge.net/forum/forum.php?forum_id=687624 Patch
- http://sourceforge.net/project/shownotes.php?group_id=108104&release_id=502366 sourceforge.net
- http://spey.cvs.sourceforge.net/spey/spey/src/MessageProcessor.cc?view=log spey.cvs.sourceforge.net
- http://www.vupen.com/english/advisories/2007/2249 www.vupen.com