CVE-2007-4068

Published: Jul 30, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the kat_id parameter to the default URI in a download action or (2) the id parameter to the default URI in a duyurular_detay action.

Affected (1)

Products: Webyapar: Webyapar

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webyapar Webyapar	Version 2.0

References (10)

http://osvdb.org/37131

Source: cve@mitre.org

http://osvdb.org/37132

Source: cve@mitre.org

http://www.securityfocus.com/bid/25061

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/35603

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4224

Source: cve@mitre.org

http://osvdb.org/37131

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/37132

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25061

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/35603

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4224

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.