Interspire : Security Vulnerabilities, CVEs, Published In 2007 (Sql injection)
SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131.
Max CVSS
6.4
EPSS Score
0.42%
Published
2007-10-12
Updated
2018-10-15
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected.
Max CVSS
7.5
EPSS Score
0.13%
Published
2007-09-27
Updated
2018-10-15
2 vulnerabilities found