Unrated severityNVD Advisory· Published Mar 13, 2007· Updated Apr 23, 2026

CVE-2007-1425

Description

SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the list parameter in an archive action.

Affected products

Triexa/Sonicmailer Pro
cpe:2.3:a:triexa:sonicmailer_pro:*:*:*:*:*:*:*:*
Range: <=3.2.3

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/22920nvdExploit
secunia.com/advisories/24474nvdVendor Advisory
osvdb.org/33986nvd
www.vupen.com/english/advisories/2007/0905nvd
www.exploit-db.com/exploits/3457nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000