Unscored severity · published Jun 12, 2007
CVE-2007-3197
SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary SQL commands via unspecified vectors
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Vbsupport Integrated Ticket System · Jelsoft
through 1.1 · source: NVD
Affected product
VI
Vbsupport Integrated Ticket System
Jelsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3197
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3197
osvdb.org
http://osvdb.org/37162
Patch
http://www.vbulletin.org/forum/showthread.php?t=94023&page=38
More from Vbsupport Integrated Ticket System
–
CVE-2007-3196
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a…