35666vdb entry
http://osvdb.org/35666 CVE-2007-2420
Burak Yilmaz Blog 1.0 - 'BRY.asp' SQL Injection
Record summary
CVE-2007-2420 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBBurak Yilmaz Blog 1.0 - 'BRY.asp' SQL InjectionExploitDB exploitby RMxNot analyzed1 file
References
625158Third-party advisory
http://secunia.com/advisories/25158 20070426 Burak Yılmaz Blog (tr) v1.0 SQL injection vulnerabilitymailing list
http://www.securityfocus.com/archive/1/466967/100/0/threaded 23678vdb entry
http://www.securityfocus.com/bid/23678 burakyilmazblog-bry-sql-injection(33945)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33945 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-2420