Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2007-1445

CVSS 7.5 10 detections found
View on NVD →
SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter.

Detection rules

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout SELECT rev 9 2020-09-10
suricata ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout UNION SELECT rev 9 2020-09-10
suricata ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout INSERT rev 9 2020-09-10
suricata ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout DELETE rev 9 2020-09-10
suricata ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout UPDATE rev 9 2020-09-10
snort ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout SELECT rev 6 2010-10-17
snort ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout UNION SELECT rev 6 2010-10-17
snort ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout INSERT rev 6 2010-10-17
snort ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout DELETE rev 6 2010-10-17
snort ET WEB_SPECIFIC_APPS BP Blog SQL Injection Attempt -- default.asp layout UPDATE rev 6 2010-10-17