CVE-2007-0140

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jan 9, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-01416.8Cross-site scripting (XSS) vulnerability in yald.php in Yet Another Link Directory 1.0 allows remote attackers to inject arbitrary web scripCVE-2007-01427.5SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commandsCVE-2007-01436.8Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URCVE-2007-01446.8Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to CVE-2007-01457.5PHP remote file inclusion vulnerability in bn_smrep1.php in BinGoPHP News (BP News) 3.01 allows remote attackers to execute arbitrary PHP coCVE-2007-01466.0Multiple cross-site scripting (XSS) vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML vCVE-2007-01475.0Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers CVE-2007-01486.8Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (application crash) or execute aCVE-2007-01497.5EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download CVE-2007-01507.5Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URCVE-2007-01517.5MitiSoft stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databCVE-2007-01527.5OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databas
CVE-2007-0140: High severity, CVSS 7.5 | Vulnix