CVE coverage

CVE-2007-0970

CVSS 7.5 10 detections found

Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input.

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID SELECT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID UNION SELECT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID INSERT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID DELETE	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID UPDATE	rev 8	2020-09-09
snort	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID UNION SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID INSERT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID DELETE	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS WebTester SQL Injection Attempt -- directions.php testID UPDATE	rev 6	2019-08-22