CVE-2007-6458: SQL Injection

Published Dec 20, 2007

Updated

SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded value of the admin parameter to shop/admin.php.

Affected Software

1 affected component

my123tkShop e-Commerce-Suite=0.9.1

Event History

Dec 20, 2007

CVE Published

12:46 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6458?

CVE-2007-6458 has been classified as a high severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.

What systems are affected by CVE-2007-6458?

CVE-2007-6458 specifically affects version 0.9.1 of the my123tkShop e-Commerce Suite.

How do I fix CVE-2007-6458?

To fix CVE-2007-6458, it is recommended to update your my123tkShop e-Commerce Suite to a patched version that addresses this SQL injection vulnerability.

What types of attacks can be executed due to CVE-2007-6458?

CVE-2007-6458 allows remote attackers to execute arbitrary SQL commands, potentially compromising the database and leaking sensitive information.

Is CVE-2007-6458 likely to be exploited in the wild?

Given the nature of SQL injection vulnerabilities, CVE-2007-6458 could potentially be exploited in the wild by attackers targeting vulnerable installations.