CVE-2007-5926: openbase_international_ltd openbase Improper Input Validation

EPSS trend

Probability

3.44%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.44% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (netragard.com)
Maturity: unknown
exploit-databaseremotemultipleVerified
OpenBase 10.0.x - Remote Buffer Overflow / Remote Command Execution
Maturity: weaponized

References

4 links

www.securityfocus.com/bid/26347VDB EntryX Refsource BIDExploit
exchange.xforce.ibmcloud.com/vulnerabilities/38291VDB EntryX Refsource XF
www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txtX Refsource MISCExploit
secunia.com/advisories/27525Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Related vulnerabilities

CVE-2007-5929openbase_international_ltdopenbase4.11%18y ago10-11-2007 02:00Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption.CVE-2007-5927openbase_international_ltdopenbase3.97%18y ago10-11-2007 02:00Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. (dot dot) in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926.CVE-2007-5928openbase_international_ltdopenbase1.76%18y ago10-11-2007 02:00OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear.CVE-2006-5328applexcode+10.34%20y ago17-10-2006 21:00OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.CVE-2006-5852openbase_international_ltdopenbase0.78%19y ago10-11-2006 02:00Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.CVE-2006-5851openbase_international_ltdopenbase0.76%19y ago10-11-2006 02:00openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.

All vulnerabilities inopenbase

CVE-2007-5926: openbase_international_ltd openbase Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References