CVE

Id
23559  
CVE No.
CVE-2007-0202  
Status
Candidate  
Description
SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter.  
Phase
Assigned (20070110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
228159 23559 CVE-2007-0202 BUGTRAQ:20070107 @lex Guestbook <= 4.0.2 Remote Command Execution Exploit  View
228160 23559 CVE-2007-0202 URL:http://www.securityfocus.com/archive/1/archive/1/456218/100/0/threaded  View
228161 23559 CVE-2007-0202 MISC:http://acid-root.new.fr/poc/20070107.txt  View
228162 23559 CVE-2007-0202 MILW0RM:3103  View
228163 23559 CVE-2007-0202 URL:http://milw0rm.com/exploits/3103  View
228164 23559 CVE-2007-0202 BID:21926  View
228165 23559 CVE-2007-0202 URL:http://www.securityfocus.com/bid/21926  View
228166 23559 CVE-2007-0202 VUPEN:ADV-2007-0137  View
228167 23559 CVE-2007-0202 URL:http://www.vupen.com/english/advisories/2007/0137  View
228168 23559 CVE-2007-0202 OSVDB:31707  View
228169 23559 CVE-2007-0202 URL:http://osvdb.org/31707  View
228170 23559 CVE-2007-0202 SECUNIA:23637  View
228171 23559 CVE-2007-0202 URL:http://secunia.com/advisories/23637  View
228172 23559 CVE-2007-0202 SREASON:2135  View
228173 23559 CVE-2007-0202 URL:http://securityreason.com/securityalert/2135  View
228174 23559 CVE-2007-0202 XF:@lexguestbook-index-sql-injection(31393)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56244 JVNDB-2007-004936 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0204 23559 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004936.html  View