« Volver al listado

CVE-2007-3628

Estado: ModificadaMedia (5)—

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pear — Structures Datagrid Datasource Mdb2

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3628",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-07-09T16:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/45805",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://pear.php.net/package/Structures_DataGrid_DataSource_MDB2/download/0.1.10",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2425",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/45805",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://pear.php.net/package/Structures_DataGrid_DataSource_MDB2/download/0.1.10",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2425",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to \"manipulate the generated sorting queries.\""
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en la función fetch en MDB2.php en PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 y anteriores permite a atacantes remotos \"manipular la ordenación generada de preguntas\"."
    }
  ],
  "lastModified": "2026-06-16T22:42:24.653",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pear:structures_datagrid_datasource_mdb2:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6293DF1-DF28-497B-9A73-CB38ADCA5EC7",
              "versionEndIncluding": "0.1.9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}