CVE

Id
25082  
CVE No.
CVE-2007-1725  
Status
Candidate  
Description
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an uploaded file to the avatar function, as demonstrated by setting admin privileges.  
Phase
Assigned (20070327)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249583 25082 CVE-2007-1725 MILW0RM:3580  View
249584 25082 CVE-2007-1725 URL:http://milw0rm.com/exploits/3580  View
249585 25082 CVE-2007-1725 MILW0RM:3581  View
249586 25082 CVE-2007-1725 URL:http://milw0rm.com/exploits/3581  View
249587 25082 CVE-2007-1725 BID:23158  View
249588 25082 CVE-2007-1725 URL:http://www.securityfocus.com/bid/23158  View
249589 25082 CVE-2007-1725 VUPEN:ADV-2007-1116  View
249590 25082 CVE-2007-1725 URL:http://www.vupen.com/english/advisories/2007/1116  View
249591 25082 CVE-2007-1725 OSVDB:34497  View
249592 25082 CVE-2007-1725 URL:http://osvdb.org/34497  View
249593 25082 CVE-2007-1725 SECUNIA:24644  View
249594 25082 CVE-2007-1725 URL:http://secunia.com/advisories/24644  View
249595 25082 CVE-2007-1725 XF:icebb-index-sql-injection(33240)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54907 JVNDB-2007-003599 HP OV NNM における特定の特権 "ファリシリティ" へのアクセス権を取得される脆弱性 HP OpenView Network Node Manager (OV NNM) には、特定の特権 "ファリシリティ" へのアクセス権を取得される脆弱性が存在します。 CVE-2007-1727 25082 6.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003599.html  View