{"api_version":"1","generated_at":"2026-07-23T08:55:26+00:00","cve":"CVE-2007-1363","urls":{"html":"https://cve.report/CVE-2007-1363","api":"https://cve.report/api/cve/CVE-2007-1363.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1363","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1363"},"summary":{"title":"CVE-2007-1363","description":"Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-04-11 22:19:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/24861","name":"http://secunia.com/advisories/24861","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"DropAFew \"id\" SQL Injection, Calorie Log Disclosure and Link Weaknesses - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/23400","name":"http://www.securityfocus.com/bid/23400","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"DropAFew Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.cynops.de/advisories/CVE-2007-1363.txt","name":"http://www.cynops.de/advisories/CVE-2007-1363.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437","name":"http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"DROPAFEW.COM - A Calorie Counting Program for your Web Browser - Comments","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33560","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33560","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1363","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1363","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1363","vulnerable":"1","versionEndIncluding":"0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dropafew","cpe5":"dropafew","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:50:35.042Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437"},{"name":"24861","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24861"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.cynops.de/advisories/CVE-2007-1363.txt"},{"name":"dropafew-multiple-sql-injection(33560)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33560"},{"name":"23400","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/23400"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-04-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437"},{"name":"24861","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24861"},{"tags":["x_refsource_MISC"],"url":"http://www.cynops.de/advisories/CVE-2007-1363.txt"},{"name":"dropafew-multiple-sql-injection(33560)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33560"},{"name":"23400","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/23400"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-1363","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437","refsource":"CONFIRM","url":"http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437"},{"name":"24861","refsource":"SECUNIA","url":"http://secunia.com/advisories/24861"},{"name":"http://www.cynops.de/advisories/CVE-2007-1363.txt","refsource":"MISC","url":"http://www.cynops.de/advisories/CVE-2007-1363.txt"},{"name":"dropafew-multiple-sql-injection(33560)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33560"},{"name":"23400","refsource":"BID","url":"http://www.securityfocus.com/bid/23400"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-1363","datePublished":"2007-04-11T22:00:00.000Z","dateReserved":"2007-03-08T00:00:00.000Z","dateUpdated":"2024-08-07T12:50:35.042Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-04-11 22:19:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dropafew:dropafew:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2","matchCriteriaId":"64C4B696-C5AF-4C47-91BB-B6EE202D6D89"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1363","Ordinal":"1","Title":"CVE-2007-1363","CVE":"CVE-2007-1363","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1363","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php.","Type":"Description","Title":"CVE-2007-1363"},{"CveYear":"2007","CveId":"1363","Ordinal":"2","NoteData":"2007-04-11","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1363","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}