CVE-2007-2622

Published: May 11, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login.php or (2) the taskid parameter to notes.php.

Affected (1)

Products: Taskdriver: Taskdriver

Taskdriver

1 product

Taskdriver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Taskdriver Taskdriver	Up to 1.2

References (14)

http://osvdb.org/35972

Source: cve@mitre.org

http://osvdb.org/35973

Source: cve@mitre.org

http://secunia.com/advisories/25221

Source: cve@mitre.org

http://www.securityfocus.com/bid/23919

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1768

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34249

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3896

Source: cve@mitre.org

http://osvdb.org/35972