CVE

Id
24826  
CVE No.
CVE-2007-1469  
Status
Candidate  
Description
SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245930 24826 CVE-2007-1469 BUGTRAQ:20070315 Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit  View
245931 24826 CVE-2007-1469 URL:http://www.securityfocus.com/archive/1/archive/1/462971/100/0/threaded  View
245932 24826 CVE-2007-1469 BID:22988  View
245933 24826 CVE-2007-1469 URL:http://www.securityfocus.com/bid/22988  View
245934 24826 CVE-2007-1469 VUPEN:ADV-2007-1002  View
245935 24826 CVE-2007-1469 URL:http://www.vupen.com/english/advisories/2007/1002  View
245936 24826 CVE-2007-1469 OSVDB:34239  View
245937 24826 CVE-2007-1469 URL:http://www.osvdb.org/34239  View
245938 24826 CVE-2007-1469 SECUNIA:24543  View
245939 24826 CVE-2007-1469 URL:http://secunia.com/advisories/24543  View
245940 24826 CVE-2007-1469 SREASON:2429  View
245941 24826 CVE-2007-1469 URL:http://securityreason.com/securityalert/2429  View
245942 24826 CVE-2007-1469 XF:absolute-gallery-sql-injection(33005)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54825 JVNDB-2007-003517 Orion-Blog の admin/default.asp における権限を取得され脆弱性 Orion-Blog の admin/default.asp には、認証の制御を回避される、および権限を取得される脆弱性が存在します。 CVE-2007-1471 24826 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003517.html  View