CVE-2007-3013 - CVE House
Back to Database
Status published Medium CVE-2007-3013

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote...

Vulnerability Description

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picture_real_edit.asp, and probably other unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3013

Credits & Attribution

No credits recorded in the NVD database.

References

More from activeweb

View All →
CVE-2007-3018
activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation...
Medium 4
CVE-2007-3017
The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964...
Medium 4
CVE-2007-3014
Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964...
Medium 4.3

Affected Vendor

Affected Software

contentserver
Vulnerable Versions:
0

Timeline

Official Publish: July 15th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.