CVE-2007-4437: SQL Injection
Published Aug 20, 2007
·Updated
SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information.
Affected Software
1 affected component
Ampache Ampache<=3.3.3.4
Remediation
Patch Available
Patch Available
Event History
Aug 20, 2007
CVE Published
10:17 PM
Aug 21, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4437?
CVE-2007-4437 has been classified as a critical SQL injection vulnerability.
2
How do I fix CVE-2007-4437?
To fix CVE-2007-4437, upgrade to Ampache version 3.3.3.5 or later.
3
What is the impact of exploiting CVE-2007-4437?
Exploitation of CVE-2007-4437 allows remote attackers to execute arbitrary SQL commands on the database.
4
What versions of Ampache are affected by CVE-2007-4437?
CVE-2007-4437 affects all versions of Ampache prior to 3.3.3.5.
5
Who can be impacted by CVE-2007-4437?
Any user running vulnerable versions of Ampache may be impacted by CVE-2007-4437 if targeted by an attacker.