CVE coverage

CVE-2007-1607

CVSS 5.0 20 detections found

search.php in w-Agora (Web-Agora) allows remote attackers to obtain potentially sensitive information via a ' (quote) value followed by certain SQL sequences in the (1) search_forum or (2) search_user parameter, which force a SQL error.

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum INSERT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UNION SELECT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum SELECT	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum DELETE	rev 8	2020-09-09
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UPDATE	rev 8	2020-09-03
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user INSERT	rev 8	2020-09-03
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user DELETE	rev 8	2020-09-03
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UPDATE	rev 8	2020-09-02
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UNION SELECT	rev 8	2020-09-02
suricata	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user SELECT	rev 8	2020-09-02
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum DELETE	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UNION SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum INSERT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user DELETE	rev 6	2010-10-01
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UPDATE	rev 6	2010-10-01
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UPDATE	rev 6	2010-10-01
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user SELECT	rev 6	2010-10-01
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UNION SELECT	rev 6	2010-10-01
snort	ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user INSERT	rev 6	2010-10-01