Back to Database
Status published
High
CVE-2007-1434
SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier...
Vulnerability Description
SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) userdetail.php, id and (2) url parameter to (b) jump.php, and id variable to (c) detail.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1434
Credits & Attribution
No credits recorded in the NVD database.
References
More from grayscale
View All →CVE-2007-1433
Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly...
Medium
4.3
CVE-2007-1432
Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers...
High
7.5
CVE-2006-4986
Grayscale BandSite CMS allows remote attackers to obtain sensitive information...
Medium
5
CVE-2006-4985
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow...
Medium
4.3
CVE-2006-4984
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS...
High
7.5
Affected Vendor
grayscale
View all reports →Affected Software
grayscale blog
Vulnerable Versions:
0
Timeline
Official Publish:
March 13th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.