Unscored severity · published Jun 11, 2007
CVE-2007-3179
Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and other unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PB
Particle Blogger · Particle Blogger
through 1.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3179
osvdb.org
http://osvdb.org/37468
securityreason.com
http://securityreason.com/securityalert/2799
www.securityfocus.com
http://www.securityfocus.com/archive/1/469984/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34583
More from Particle Blogger
–
CVE-2007-1510
SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter