PT-2007-4612 · Phpecho · Phpecho Cms

Published 2007-06-21 · Updated 2008-11-13 · CVE-2007-3335

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPEcho CMS versions prior to 1.6

Description The issue concerns SQL injection vulnerabilities in the admin panel, allowing remote attackers to execute arbitrary SQL commands.

Recommendations For versions prior to 1.6, update to version 1.6 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3335

Affected Products

Phpecho Cms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3335 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=493155 · Patch
• http://secunia.com/advisories/24461 · Vendor Advisory
• http://osvdb.org/34004 · Note