CVE

Id
25335  
CVE No.
CVE-2007-1978  
Status
Candidate  
Description
SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view_game_list action.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252635 25335 CVE-2007-1978 MILW0RM:3640  View
252636 25335 CVE-2007-1978 URL:http://www.milw0rm.com/exploits/3640  View
252637 25335 CVE-2007-1978 VUPEN:ADV-2007-1205  View
252638 25335 CVE-2007-1978 URL:http://www.vupen.com/english/advisories/2007/1205  View
252639 25335 CVE-2007-1978 OSVDB:37410  View
252640 25335 CVE-2007-1978 URL:http://osvdb.org/37410  View
252641 25335 CVE-2007-1978 XF:phpfusion-arcade-index-sql-injection(33361)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54984 JVNDB-2007-003676 Topliste モジュールの index.php における SQL インジェクションの脆弱性 PHP-Fusion 用の Topliste モジュールの index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1980 25335 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003676.html  View