{"id":"CVE-2007-10001","aliases":["EUVD-2007-0994","GHSA-54q9-gr43-5wv9"],"status":"published","title":"web-cyradm search.php sql injection","description":"A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00718,"percentile":0.54129,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-01-05T11:26:20Z","modified":"2026-06-16T22:36:43Z","products":[{"vendor":"web-cyradm_project","product":"web-cyradm"}],"references":[{"url":"https://vuldb.com/?id.217449","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.217449","tags":["signature","permissions-required","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://github.com/web-cyradm/web-cyradm/commit/3e8f0717f133907bb6a09cb674b05c5f273da3e1","tags":["patch","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-10001"},{"url":"https://github.com/advisories/GHSA-54q9-gr43-5wv9"}],"sources":{"cve":[{"id":"CVE-2007-10001","title":"web-cyradm search.php sql injection","description":"A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability.","status":"published","published":"2023-01-05T11:26:20.297Z","modified":"2025-04-10T14:16:20.559Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"},{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"},{"version":"2.0","score":2.7,"vector":"AV:A/AC:L/Au:S/C:P/I:N/A:N","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T13:32:11.910312Z"}],"euvd":[{"id":"EUVD-2007-0994","description":"A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability.","status":"published","published":"2023-01-05T11:26:20Z","modified":"2025-04-10T14:16:20Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:37.204811Z"}],"ghsa":[{"id":"GHSA-54q9-gr43-5wv9","title":"A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown...","description":"A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability.","status":"published","published":"2023-01-05T12:30:27Z","modified":"2023-01-27T05:03:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:42:19.36916Z"}],"nvd":[{"id":"CVE-2007-10001","description":"A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability.","status":"published","published":"2023-01-05T12:15:09.04Z","modified":"2026-06-16T22:36:43.54Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":2.7,"vector":"AV:A/AC:L/Au:S/C:P/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:24.391698Z"}]}}