CVE

Id
24327  
CVE No.
CVE-2007-0970  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input.  
Phase
Assigned (20070215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
238979 24327 CVE-2007-0970 BUGTRAQ:20070214 WebTester 5.0.2 sql injection and XSS vulnerabilities  View
238980 24327 CVE-2007-0970 URL:http://www.securityfocus.com/archive/1/archive/1/460078/100/0/threaded  View
238981 24327 CVE-2007-0970 BID:22559  View
238982 24327 CVE-2007-0970 URL:http://www.securityfocus.com/bid/22559  View
238983 24327 CVE-2007-0970 VUPEN:ADV-2007-0633  View
238984 24327 CVE-2007-0970 URL:http://www.vupen.com/english/advisories/2007/0633  View
238985 24327 CVE-2007-0970 OSVDB:33203  View
238986 24327 CVE-2007-0970 URL:http://osvdb.org/33203  View
238987 24327 CVE-2007-0970 OSVDB:33204  View
238988 24327 CVE-2007-0970 URL:http://osvdb.org/33204  View
238989 24327 CVE-2007-0970 SECUNIA:24157  View
238990 24327 CVE-2007-0970 URL:http://secunia.com/advisories/24157  View
238991 24327 CVE-2007-0970 SREASON:2261  View
238992 24327 CVE-2007-0970 URL:http://securityreason.com/securityalert/2261  View
238993 24327 CVE-2007-0970 XF:webtester-directions-sql-injection(32490)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54697 JVNDB-2007-003389 Jupiter CMS の modules/emoticons.php における任意のファイルをアップロードされる脆弱性 Jupiter CMS の modules/emoticons.php には、無制限にファイルアップロードされることにより、任意のファイルをアップロードされる脆弱性が存在します。 CVE-2007-0972 24327 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003389.html  View