← Database

CVE-2007-2230

MEDIUM CVSS: 6.5 Published: 2007-04-25 Modified: 2026-06-16

Description

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the ofinterest parameter in a light search query, (2) description parameter in the advanced search query, and possibly other vectors.

Affected Platforms

Broadcom Cleverpath Portal

Weakness Type

CWE-89

References