CVE Database
/

CVE-2007-3214

Back to search

CVE-2007-3214

Published: Jun 14, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the template parameter.

VendorProductVersions

n/a

n/a

affected
n/a

References

24398
vdb-entry
x_refsource_BID
4054
exploit
x_refsource_EXPLOIT-DB
36607
vdb-entry
x_refsource_OSVDB
ADV-2007-2123
vdb-entry
x_refsource_VUPEN
25605
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now