Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2007-2898

CVSS 7.5 10 detections found
View on NVD →
SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php.

Detection rules

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating SELECT rev 13 2020-09-10
suricata ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating UNION SELECT rev 13 2020-09-10
suricata ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating INSERT rev 13 2020-09-10
suricata ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating DELETE rev 13 2020-09-10
suricata ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating UPDATE rev 13 2020-09-10
snort ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating SELECT rev 9 2010-09-03
snort ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating UNION SELECT rev 9 2010-09-03
snort ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating INSERT rev 9 2010-09-03
snort ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating DELETE rev 9 2010-09-03
snort ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating UPDATE rev 9 2010-09-03