Unscored severity · published Jul 9, 2007
CVE-2007-3628
Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting…
–
CVSS
1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Structures Datagrid Datasource Mdb2 · Pear
through 0.1.9 · source: NVD
Affected product
SD
Structures Datagrid Datasource Mdb2
Pear
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3628
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3628
osvdb.org
http://osvdb.org/45805
Patch
http://pear.php.net/package/Structures_DataGrid_DataSource_MDB2/download/0.1.10
www.vupen.com
http://www.vupen.com/english/advisories/2007/2425
More from Structures Datagrid Datasource Mdb2
–
CVE-2007-5934
The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote…