CVE-2007-4119 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 67)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.17% — more likely to be exploited than 67% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-08-01 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| berthanas ziyaretci | defteri |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Berthanas Ziyaretci Defteri 2.0 - 'Yonetici.asp' SQL Injection | 2007-07-28 |
References
- http://secunia.com/advisories/26371
- http://securityreason.com/securityalert/2943
- http://www.securityfocus.com/archive/1/474930/100/0/threaded
- http://www.securityfocus.com/bid/25109
- http://www.vupen.com/english/advisories/2007/2761
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35684
- http://secunia.com/advisories/26371
- http://securityreason.com/securityalert/2943
- http://www.securityfocus.com/archive/1/474930/100/0/threaded
- http://www.securityfocus.com/bid/25109
- http://www.vupen.com/english/advisories/2007/2761
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35684
→ the Explorer · watch your stack · NVD