CVE-2007-1493
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to...
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
Exploit likelihood
What each source reports
NVD Score used
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
- Record
CVE-2007-1493- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
- Record
CVE-2007-1493- Updated
- 2026-11-02
EUVDEUVD-2007-1487 No score
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
- Record
EUVD-2007-1487- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9g42-7prc-3pxw No score
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to...
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
- Record
GHSA-9g42-7prc-3pxw- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | NukeSentinel 2.5.05 - 'nukesentinel.php' File Disclosure | 2007-02-20 |
| Exploit-DB | NukeSentinel 2.5.06 - SQL Injection | 2007-03-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1493 is a high vulnerability (CVSS 7.5) in Nukescripts Nukesentinel, published March 16, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.37%, the 88th percentile. No source names a fixed version.