CVE

Id
24850  
CVE No.
CVE-2007-1493  
Status
Candidate  
Description
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments