SQL Injection Vulnerability in Burak Yilmaz Blog 1.0
CVE-2007-2420

Currently unrated

Key Information:

Vendor

Burak Yilmaz

Status
Burak Yilmaz Blog
Vendor
CVE Published:
2 May 2007

What is CVE-2007-2420?

The Burak Yilmaz Blog 1.0 is susceptible to SQL injection through a flaw in bry.asp, enabling remote attackers to manipulate the database by executing arbitrary SQL commands via the maliciously crafted id parameter. This exploitation could lead to unauthorized data access and potential compromise of the underlying database integrity.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/33945
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/23678
vdb-entryx_refsource_BID
http://secunia.com/advisories/25158
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.