CVE

Id
24328  
CVE No.
CVE-2007-0971  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the attack vector might involve _SERVER.  
Phase
Assigned (20070215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
238994 24328 CVE-2007-0971 BUGTRAQ:20070214 Jupiter CMS 1.1.5 Multiple Vulnerabilities  View
238995 24328 CVE-2007-0971 URL:http://www.securityfocus.com/archive/1/archive/1/460076/100/0/threaded  View
238996 24328 CVE-2007-0971 BUGTRAQ:20070214 Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities  View
238997 24328 CVE-2007-0971 URL:http://www.securityfocus.com/archive/1/archive/1/460100/100/0/threaded  View
238998 24328 CVE-2007-0971 MISC:http://mgsdl.free.fr/advisories/12070214.txt  View
238999 24328 CVE-2007-0971 MISC:http://www.acid-root.new.fr/advisories/12070214.txt  View
239000 24328 CVE-2007-0971 MILW0RM:3310  View
239001 24328 CVE-2007-0971 URL:http://milw0rm.com/exploits/3310  View
239002 24328 CVE-2007-0971 BID:22560  View
239003 24328 CVE-2007-0971 URL:http://www.securityfocus.com/bid/22560  View
239004 24328 CVE-2007-0971 OSVDB:33727  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54698 JVNDB-2007-003390 Jupiter CMS の index.php におけるクロスサイトスクリプティングの脆弱性 Jupiter CMS の index.php には、管理者が Logged Guest アクションが実行する際に適切にサニタイズせずに表示される不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0973 24328 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003390.html  View