CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2007-3197
https://notcve.org/view.php?id=CVE-2007-3197
SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección de SQL en vBSupport.php en vBSupport 1.1 en versiones anteriores a 1.1a permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores sin especificar. • http://osvdb.org/37162 http://www.vbulletin.org/forum/showthread.php?t=94023&page=38 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2007-3196 – vBSupport 2.0.0 Integrated Ticket System - 'vBSupport.php' SQL Injection
https://notcve.org/view.php?id=CVE-2007-3196
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action. Vulnerabilidad de inyección de SQL en vBSupport.php en vBSupport Integrated Ticket System 3.x.x permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ticketid en la acción showticket. • https://www.exploit-db.com/exploits/30168 http://osvdb.org/37331 http://osvdb.org/38811 http://securityreason.com/securityalert/2795 http://www.securityfocus.com/archive/1/470966/100/0/threaded http://www.securityfocus.com/bid/24397 https://exchange.xforce.ibmcloud.com/vulnerabilities/34804 •