PT-2007-2151 · Acgvannu · Acgvannu

Published 2007-02-03 · Updated 2017-07-29 · CVE-2007-0698

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ACGVannu versions 1.3 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id mod parameter to the "templates/modif.html" endpoint. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions 1.3 and earlier, avoid using the id mod parameter in the "templates/modif.html" endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0698

Affected Products

Acgvannu

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-0698 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32257 · Note
• http://vupen.com/english/advisories/2007/0388 · Note
• http://osvdb.org/34666 · Note