CVE-2007-10xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

3 records · Page 1 of 1

• CVE-2007-10003: The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection 6.3 Medium

  A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress. This issue affects some unknown processing of the file ajax_blurb.php of the component HTTP POST Request Handler. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. Upgrading to version 0.9.7b is able to address this issue. The pat

  Updated 2024-09-06
• CVE-2007-10002: web-cyradm auth.inc.php sql injection 7.3 High

  A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php. The manipulation of the argument login/login_password/LANG leads to sql injection. The attack may be launched remotely. The name of the patch is 2bcbead3bdb5f118bf2c38c541eaa73c29dcc90f. It is recommended to apply a patch to fix this issue.

  Updated 2025-04-09
• CVE-2007-10001: web-cyradm search.php sql injection 3.5 Low

  A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability.

  Updated 2025-04-10

Search a CVE ID or check dependency files →