CVE-2007-4119

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-01 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields.

Affected products

Berthanas Ziyaretci Defteri: 2.0

References

http://secunia.com/advisories/26371
http://securityreason.com/securityalert/2943
http://www.securityfocus.com/archive/1/474930/100/0/threaded
http://www.securityfocus.com/bid/25109
http://www.vupen.com/english/advisories/2007/2761
https://exchange.xforce.ibmcloud.com/vulnerabilities/35684
http://secunia.com/advisories/26371
http://securityreason.com/securityalert/2943
http://www.securityfocus.com/archive/1/474930/100/0/threaded
http://www.securityfocus.com/bid/25109
http://www.vupen.com/english/advisories/2007/2761
https://exchange.xforce.ibmcloud.com/vulnerabilities/35684

Get alerted when CVE-2007-4119 or the next vulnerability affects your stack