CVE-2007-3128

IBM WebSphere Portal 1.0 - SQL Injection via Page Parameter

Title source: llm

Description

SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/24513

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/34164

Third Party Advisory mailing-list x_refsource_fulldisc

http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0369.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/34896

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/2237

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/471629/100/0/threaded

Various Sources x_refsource_misc

http://www.netvigilance.com/advisory0033

Scores

EPSS 0.0124

EPSS Percentile 66.0%

Details

Status published

Products (1)

ibm/websphere_portal 1.0

Published Jun 19, 2007

Tracked Since Feb 18, 2026