CVEvulnerability
CVE-2007-5180
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the (1) Kategori parameter in satilik.asp and the (2) Emlak parameter in detay.asp.
Affected configurations
• ohesa emlak portali ohesa emlak portali
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/37407 osvdb.org
- http://osvdb.org/37408 osvdb.org
- http://packetstormsecurity.org/0709-exploits/ohesa-sql.txt packetstormsecurity.org
- http://secunia.com/advisories/27033 Vendor Advisory
- http://www.securityfocus.com/bid/25880 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3319 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36877 exchange.xforce.ibmcloud.com
- http://osvdb.org/37407 osvdb.org
- http://osvdb.org/37408 osvdb.org
- http://packetstormsecurity.org/0709-exploits/ohesa-sql.txt packetstormsecurity.org
- http://secunia.com/advisories/27033 Vendor Advisory
- http://www.securityfocus.com/bid/25880 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3319 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36877 exchange.xforce.ibmcloud.com