« Volver al listado

CVE-2007-0663

Estado: ModificadaAlta (7.5)—

SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter, a different vector than CVE-2007-0631. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Eclectic Designs — Cascadianfaq

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0663",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-02-01T22:28:00.000",
  "references": [
    {
      "url": "http://www.vupen.com/english/advisories/2007/0424",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0424",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter, a different vector than CVE-2007-0631.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección SQL en index.php de Eclectic Designs CascadianFAQ 4.1 y versiones anteriores  permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro quid, vulnerabilidad distinta a CVE-2007-0631.\r\nNOTA: El origen de esta información es desconocido; los detalles se han obtenido solamente de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:36:01.610",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:eclectic_designs:cascadianfaq:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F6EAAA1-EA18-4883-A258-18E445C91B46",
              "versionEndIncluding": "4.0"
            },
            {
              "criteria": "cpe:2.3:a:eclectic_designs:cascadianfaq:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD0E8EB9-1E56-4DF5-B9AC-FE483037EFF8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}