Unrated severityNVD Advisory· Published Nov 15, 2007· Updated Apr 23, 2026

CVE-2007-6004

Description

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an artikel action or (2) the katid parameter in a produk action.

Affected products

Toko/Instan
cpe:2.3:a:toko:instan:7.6:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/26433nvd
www.vupen.com/english/advisories/2007/3906nvd
exchange.xforce.ibmcloud.com/vulnerabilities/38449nvd
www.exploit-db.com/exploits/4623nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000