CVE-2007-6373 | BDVDB-2026-28213 Detail

Description#

Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the (1) categorie parameter to catdownload.php, or the id parameter to (2) download.php or (3) hitcounter.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/38945
http://marc.info/?l=bugtraq&m=119730791316604&w=2
http://www.securityfocus.com/bid/26799

Exploit#

No public exploit known

History#

Version 12007-12-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.