CVE-2007-6602
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote...
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.
- Record
CVE-2007-6602- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.
- Record
CVE-2007-6602- Updated
- 2026-11-02
EUVDEUVD-2007-6568 No score
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.
- Record
EUVD-2007-6568- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j69h-fp9j-cgvg No score
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote...
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.
- Record
GHSA-j69h-fp9j-cgvg- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | NoseRub 0.5.2 - Login SQL Injection | 2007-12-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6602 is a high vulnerability (CVSS 7.5) in Noserub, published December 31, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. No source names a fixed version.
References
seclog.de/pub/seclog-2007-001.txt
osvdb.org/39832
secunia.com/advisories/28259
securityfocus.com/bid/27065
exploit-db.com/exploits/4805
exchange.xforce.ibmcloud.com/vulnerabilities/39318
noserub.googlecode.com/svn/trunk/app/models/identity.php
nvd.nist.gov/vuln/detail/CVE-2007-6602
github.com/advisories/GHSA-j69h-fp9j-cgvg