CVE-2007-3637

SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-00000008. this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.

• CWE-89

• http://lists.immunitysec.com/pipermail/dailydave/2007-July/004448.html
• http://osvdb.org/45801
• http://www.securityfocus.com/bid/24783
• http://www.wslabi.com/wabisabilabi/initPublishedBid.do?
• http://lists.immunitysec.com/pipermail/dailydave/2007-July/004448.html
• http://osvdb.org/45801
• http://www.securityfocus.com/bid/24783
• http://www.wslabi.com/wabisabilabi/initPublishedBid.do?

Published

Jul 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3631SQL injection vulnerability in index.php in GameSiteScript (…
• CVE-2007-3632Multiple PHP remote file inclusion vulnerabilities in LimeSu…
• CVE-2007-3633Absolute path traversal vulnerability in the Chilkat Softwar…
• CVE-2007-3634Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for …
• CVE-2007-3635Multiple unspecified vulnerabilities in the G/PGP (GPG) Plug…
• CVE-2007-3636Multiple unspecified vulnerabilities in the G/PGP (GPG) Plug…
• CVE-2007-3638Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted…
• CVE-2007-3639WordPress before 2.2.2 allows remote attackers to redirect v…
• CVE-2007-3640Adobe Integrated Runtime (AIR, aka Apollo) allows context-de…
• CVE-2007-3641archive_read_support_format_tar.c in libarchive before 2.2.4…
• CVE-2007-3642The decode_choice function in net/netfilter/nf_conntrack_h32…
• CVE-2007-3643admin/index.php in AV Arcade 2.1b grants administrative priv…