Unscored severity · published Mar 20, 2007
CVE-2007-1510
SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter
–
CVSS
2.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PB
Particle Blogger · Particle Blogger
1.0.0; 1.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1510
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1510
forums.particlesoft.net
http://forums.particlesoft.net/viewtopic.php?t=675
osvdb.org
http://osvdb.org/34305
secunia.com
http://secunia.com/advisories/24559
securityreason.com
http://securityreason.com/securityalert/2460
www.securityfocus.com
http://www.securityfocus.com/archive/1/463027/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/23005
More from Particle Blogger
–
CVE-2007-3179
Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and…