CVE-2007-1656

Multiple SQL injection vulnerabilities in index.php in Katalog Plyt Audio 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fraza and (2) litera parameters, different vectors than CVE-2007-1612. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-03-24

Last modified

2024-08-07

Affected products

• Katalog Plyt Audio (Katalog Plyt Audio)

References

• http://osvdb.org/37184
• http://www.vupen.com/english/advisories/2007/1015