CVE

Id
24052  
CVE No.
CVE-2007-0695  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escape_sqlData, implode_sql, and implode_sqlIn functions, but these are protection schemes, not the vulnerable functions.  
Phase
Assigned (20070203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
234506 24052 CVE-2007-0695 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=481131&group_id=98260  View
234507 24052 CVE-2007-0695 VIM:20070203 FLIP SQL injection clarification  View
234508 24052 CVE-2007-0695 URL:http://www.attrition.org/pipermail/vim/2007-February/001282.html  View
234509 24052 CVE-2007-0695 VUPEN:ADV-2007-0454  View
234510 24052 CVE-2007-0695 URL:http://www.vupen.com/english/advisories/2007/0454  View
234511 24052 CVE-2007-0695 OSVDB:33649  View
234512 24052 CVE-2007-0695 URL:http://osvdb.org/33649  View
234513 24052 CVE-2007-0695 XF:flip-multiple-sql-injection(31902)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54633 JVNDB-2007-003325 ACGVannu の index2.php におけるパスワードなどを変更される脆弱性 ACGVannu の index2.php には、templates/modif.html に関する処理に不備があるため、パスワードまたはユーザプロファイルを変更される脆弱性が存在します。 CVE-2007-0697 24052 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003325.html  View