CVE-2007-3394 - CVE House
Back to Database
Status published High CVE-2007-3394

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers...

Vulnerability Description

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the (1) artid parameter to mod.php in a viewarticle action (publisher mod) and the (2) bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are already covered by CVE-2006-6873.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3394

Credits & Attribution

No credits recorded in the NVD database.

References

More from endonesia

View All →
CVE-2010-3461
SQL injection vulnerability in the Publisher module in eNdonesia 8.4...
High 7.5
CVE-2008-3452
SQL injection vulnerability in the Calendar module in eNdonesia 8.4...
Medium 6.8
CVE-2006-6874
Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4...
Medium 6.8
CVE-2006-6873
Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow...
High 7.5
CVE-2006-6872
Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote...
Medium 5

Affected Vendor

Affected Software

endonesia
Vulnerable Versions:
8.4

Timeline

Official Publish: June 26th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.