CVE-2007-3631

Published: Jul 10, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the params parameter, related to missing input validation of the id field.

Affected (1)

Products: Gamesitescript: Gamesitescript

Gamesitescript

1 product

Gamesitescript

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gamesitescript Gamesitescript	version ≤ 3.1

References (12)

http://osvdb.org/36362

Source: cve@mitre.org

http://secunia.com/advisories/25983

Source: cve@mitre.org

http://www.securityfocus.com/bid/24807

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2460

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35292

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4159

Source: cve@mitre.org

http://osvdb.org/36362