Unscored severity · published Nov 10, 2007
CVE-2007-5916
SQL injection vulnerability in the login page in phphelpdesk 0.6.16 allows remote attackers to execute arbitrary SQL commands via unspecified parameters related to the "login…
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the login page in phphelpdesk 0.6.16 allows remote attackers to execute arbitrary SQL commands via unspecified parameters related to the "login procedures."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phphelpdesk · Phphelpdesk
0.6.16 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5916
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5916
securityreason.com
http://securityreason.com/securityalert/3359
www.securityfocus.com
http://www.securityfocus.com/archive/1/483256/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26319
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38260
More from Phphelpdesk
–
CVE-2007-5915
Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a