CVE-2007-5180

Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the (1) Kategori parameter in satilik.asp and the (2) Emlak parameter in detay.asp.

Published: Oct 3, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-5180
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
ohesa_emlak_portali / ohesa_emlak_portali	-	-

http://osvdb.org/37407
http://osvdb.org/37408
http://packetstormsecurity.org/0709-exploits/ohesa-sql.txt
http://secunia.com/advisories/27033
http://www.securityfocus.com/bid/25880
http://www.vupen.com/english/advisories/2007/3319
https://exchange.xforce.ibmcloud.com/vulnerabilities/36877

Vulnerability Database

CVE-2007-5180