CVE-2007-6171

SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

• CWE-89

• http://downloads.digium.com/pub/security/AST-2007-025.htmlPatch, Vendor Advisory
• http://osvdb.org/38933Broken Link
• http://secunia.com/advisories/27873Third Party Advisory
• http://securitytracker.com/id?1019021Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/484387/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/26645Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/4055Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38766Third Party Advisory, VDB Entry
• http://downloads.digium.com/pub/security/AST-2007-025.htmlPatch, Vendor Advisory
• http://osvdb.org/38933Broken Link
• http://secunia.com/advisories/27873Third Party Advisory
• http://securitytracker.com/id?1019021Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/484387/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/26645Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/4055Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38766Third Party Advisory, VDB Entry

Published

Nov 30, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6165Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted…
• CVE-2007-6166Stack-based buffer overflow in Apple QuickTime before 7.3.1,…
• CVE-2007-6167Untrusted search path vulnerability in yast2-core in SUSE Li…
• CVE-2007-6168SQL injection vulnerability in default.asp in VU Case Manage…
• CVE-2007-6169SQL injection vulnerability in admin/index2.asp in GOUAE DWD…
• CVE-2007-6170SQL injection vulnerability in the Call Detail Record Postgr…
• CVE-2007-6172Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow r…
• CVE-2007-6173Cross-site scripting (XSS) vulnerability in c/portal/login i…
• CVE-2007-6174PHPDevShell before 0.7.0 allows remote authenticated users t…
• CVE-2007-6175Buffer overflow in Lhaplus 1.55 and earlier allows remote at…
• CVE-2007-6176kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) all…
• CVE-2007-6177PHP remote file inclusion vulnerability in Exchange/include.…