CVE-2007-1971
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Gazi Okul Sitesi 2007的fotokategori.asp中存在SQL注入漏洞。远程攻击者可以借助查询字符串，执行任意的SQL指令。
Public Exploits 1
ExploitDB · 1
EDB-29817 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2007-1971
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers to execute arbitrary SQL commands via the query string.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Gazi Okul Sitesi 'Fotokategori.ASP' SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gazi Okul Sitesi 2007的fotokategori.asp中存在SQL注入漏洞。远程攻击者可以借助查询字符串，执行任意的SQL指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2007-1971
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-1971
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-1971 (3)
Other References for CVE-2007-1971 (1)
Same Patch Batch · n/a · 2007-04-11 · 39 CVEs total
| CVE-2007-1950 | WebBlizzard CMS 'index_cms.php'跨站脚本攻击漏洞 | |
| CVE-2007-1941 | IBM Lotus Domino Web Access Active Content Filter 跨站脚本攻击漏洞 | |
| CVE-2007-1942 | FastStone Image Viewer 整数溢出漏洞 | |
| CVE-2007-1943 | ACDSee 9.0 Photo Manager 整数溢出漏洞 | |
| CVE-2007-1944 | IBM WebSphere Application Server Java Message Service拒绝服务漏洞 | |
| CVE-2007-1945 | IBM WebSphere Application Server Servlet Engine/Web Container未明漏洞 | |
| CVE-2007-1946 | Microsoft Windows Explorer 整数溢出漏洞 | |
| CVE-2007-1947 | Firebug extension DOM templates 跨站脚本攻击漏洞 | |
| CVE-2007-1948 | IrfanView 缓冲区溢出漏洞 | |
| CVE-2007-1949 | WebBlizzard CMS 会话固定漏洞 | |
| CVE-2007-1940 | IBM Tivoli Business Service Manager NCISETUP.DB及MSI.LOG文件明文口令泄露漏洞 | |
| CVE-2007-1951 | onelook obo Shop PHPSESSID 设置会话固定漏洞 | |
| CVE-2007-1952 | onebyone CMS 远程会话固定漏洞 | |
| CVE-2007-1953 | onelook courts on-line PHPSESSID cookie web会话固定漏洞 | |
| CVE-2007-1954 | ArchiveXpert 多个目录遍历漏洞 | |
| CVE-2007-1955 | SignKorea SKCrypAX ActiveX控件多个栈溢出漏洞 | |
| CVE-2007-1956 | Groupee UBB.Threads 'ubbthreads.php' SQL注入漏洞 | |
| CVE-2007-1957 | Guernion Sylvain Portail Web Php 多个PHP代码注入漏洞 | |
| CVE-2007-1357 | Linux Kernel AppleTalk atalk_sum_skb函数拒绝服务漏洞 | |
| CVE-2007-1962 | XOOPS WF-Snippets模块 'index.php'SQL注入漏洞 |
Showing top 20 of 39 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-1971
No comments yet