CVE-2007-1425

Published: Mar 13, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the list parameter in an archive action.

Affected (1)

Products: Triexa: Sonicmailer Pro

Triexa

1 product

Sonicmailer Pro

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Triexa Sonicmailer Pro	version ≤ 3.2.3

References (10)

http://osvdb.org/33986

Source: cve@mitre.org

http://secunia.com/advisories/24474

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/22920

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/0905

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3457

Source: cve@mitre.org

http://osvdb.org/33986