CVE

Id
25331  
CVE No.
CVE-2007-1974  
Status
Candidate  
Description
SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via the articleid parameter to print.php.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252571 25331 CVE-2007-1974 BUGTRAQ:20080218 XOOPS Module section SQL Injection(articleid)  View
252572 25331 CVE-2007-1974 URL:http://www.securityfocus.com/archive/1/archive/1/488317/100/0/threaded  View
252573 25331 CVE-2007-1974 MILW0RM:3644  View
252574 25331 CVE-2007-1974 URL:http://www.milw0rm.com/exploits/3644  View
252575 25331 CVE-2007-1974 MILW0RM:3645  View
252576 25331 CVE-2007-1974 URL:http://www.milw0rm.com/exploits/3645  View
252577 25331 CVE-2007-1974 MILW0RM:3646  View
252578 25331 CVE-2007-1974 URL:http://www.milw0rm.com/exploits/3646  View
252579 25331 CVE-2007-1974 MISC:http://www.xoops.org/modules/newbb/viewtopic.php?viewmode=flat&order=ASC&topic_id=58229&forum=4&move=next&topic_time=1176217411  View
252580 25331 CVE-2007-1974 CONFIRM:http://www.xoops.org/modules/news/article.php?storyid=3717  View
252581 25331 CVE-2007-1974 CONFIRM:http://addons.zarilia.com/index.php?page_type=static&id=43  View
252582 25331 CVE-2007-1974 VIM:20070411 WF-Sections SQL injection vendor ack; shows up in other modules  View
252583 25331 CVE-2007-1974 URL:http://www.attrition.org/pipermail/vim/2007-April/001507.html  View
252584 25331 CVE-2007-1974 BID:23258  View
252585 25331 CVE-2007-1974 URL:http://www.securityfocus.com/bid/23258  View
252586 25331 CVE-2007-1974 BID:23259  View
252587 25331 CVE-2007-1974 URL:http://www.securityfocus.com/bid/23259  View
252588 25331 CVE-2007-1974 BID:23261  View
252589 25331 CVE-2007-1974 URL:http://www.securityfocus.com/bid/23261  View
252590 25331 CVE-2007-1974 OSVDB:52230  View
252591 25331 CVE-2007-1974 URL:http://osvdb.org/52230  View
252592 25331 CVE-2007-1974 VUPEN:ADV-2007-1207  View
252593 25331 CVE-2007-1974 URL:http://www.vupen.com/english/advisories/2007/1207  View
252594 25331 CVE-2007-1974 VUPEN:ADV-2007-1208  View
252595 25331 CVE-2007-1974 URL:http://www.vupen.com/english/advisories/2007/1208  View
252596 25331 CVE-2007-1974 VUPEN:ADV-2007-1209  View
252597 25331 CVE-2007-1974 URL:http://www.vupen.com/english/advisories/2007/1209  View
252598 25331 CVE-2007-1974 OSVDB:41387  View
252599 25331 CVE-2007-1974 URL:http://osvdb.org/41387  View
252600 25331 CVE-2007-1974 XF:xoops-wfsection-print-sql-injection(33378)  View
252601 25331 CVE-2007-1974 URL:http://xforce.iss.net/xforce/xfdb/33378  View
252602 25331 CVE-2007-1974 XF:xoops-zmagazine-print-sql-injection(33379)  View
252603 25331 CVE-2007-1974 URL:http://xforce.iss.net/xforce/xfdb/33379  View
252604 25331 CVE-2007-1974 XF:xoops-xfsection-print-sql-injection(33380)  View

Related JVN