CVE-2007-1696

ALTO 7.5CVE-2007-1696 · Published 27/03/2007 · updated 16/06/2026

En resumen

CVE-2007-1696 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a active newsletter (active web softwares).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 69.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
active newsletter active_web_softwares	`≤ 4.3`	No fix yet

Description

SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.

References

secunia.com/advisories/24640
osvdb.org/34491
securityfocus.com/bid/23115 · Exploit
vupen.com/english/advisories/2007/1098
exchange.xforce.ibmcloud.com/vulnerabilities/33197
exploit-db.com/exploits/3556

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free