CVE-2007-3128: SQL Injection
Published Jun 19, 2007
·Updated
SQL injection vulnerability in content.php in WSPortal 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter.
Affected Software
1 affected component
IBM WebSphere Portal=1.0
Event History
Jun 19, 2007
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3128?
CVE-2007-3128 is considered a medium severity vulnerability due to its potential to allow remote SQL injection attacks.
2
How do I fix CVE-2007-3128?
To fix CVE-2007-3128, enable magic_quotes_gpc or implement parameterized queries to mitigate SQL injection risks.
3
What software is affected by CVE-2007-3128?
CVE-2007-3128 affects IBM WebSphere Portal version 1.0.
4
Can CVE-2007-3128 be exploited remotely?
Yes, CVE-2007-3128 allows remote attackers to execute arbitrary SQL commands if the vulnerability is present.
5
What are the consequences of an exploit for CVE-2007-3128?
Exploitation of CVE-2007-3128 could lead to unauthorized access to the database and manipulation of sensitive data.