CVE coverage

CVE-2007-1026

CVSS 7.5 10 detections found

SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information.

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album SELECT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album UNION SELECT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album INSERT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album DELETE	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album UPDATE	rev 8	2020-09-09
snort	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album UNION SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album INSERT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album DELETE	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS XLAtunes SQL Injection Attempt -- view.php album UPDATE	rev 6	2019-08-22