CVE

Id
24232  
CVE No.
CVE-2007-0875  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this issue has been disputed by a third party, stating that the file does not use a SQL database.  
Phase
Assigned (20070212)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
237284 24232 CVE-2007-0875 BUGTRAQ:20070209 mcRefer SQL injection  View
237285 24232 CVE-2007-0875 URL:http://www.securityfocus.com/archive/1/archive/1/459649/100/0/threaded  View
237286 24232 CVE-2007-0875 BUGTRAQ:20070211 Re: mcRefer SQL injection  View
237287 24232 CVE-2007-0875 URL:http://www.securityfocus.com/archive/1/archive/1/459796/100/200/threaded  View
237288 24232 CVE-2007-0875 MISC:http://forums.avenir-geopolitique.net/viewtopic.php?t=2642  View
237289 24232 CVE-2007-0875 BID:22507  View
237290 24232 CVE-2007-0875 URL:http://www.securityfocus.com/bid/22507  View
237291 24232 CVE-2007-0875 OSVDB:33675  View
237292 24232 CVE-2007-0875 URL:http://osvdb.org/33675  View
237293 24232 CVE-2007-0875 SREASON:2235  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54669 JVNDB-2007-003361 March Networks DVR 3000 などにおけるサービス運用妨害 (DoS) の脆弱性 March Networks DVR 3000 および 4000 Digital Video Recorders には、不特定のサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-0877 24232 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003361.html  View