peter bassill · operator
$ cve CVE-2007-3609 JSON

CVE-2007-3609 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 1.8% (pctl 78)

Patch early

A public exploit exists.

Description

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) b.php and (2) account/gallery.php, and other unspecified vectors.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS1.78% — more likely to be exploited than 78% of all CVEs
On CISA KEVno
Public exploityes
Published2007-07-06
Last modified2026-06-16

Affected (1)

VendorProduct
emeetingonline dating software

Public exploits

SourceTitleDate
exploit-dbeMeeting Online Dating Software 5.2 - SQL Injection2007-07-06

References

→ the Explorer  ·  watch your stack  ·  NVD