CVE

Id
25336  
CVE No.
CVE-2007-1979  
Status
Candidate  
Description
SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and 3.05 might also be affected.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252642 25336 CVE-2007-1979 MILW0RM:3655  View
252643 25336 CVE-2007-1979 URL:http://www.milw0rm.com/exploits/3655  View
252644 25336 CVE-2007-1979 BID:23286  View
252645 25336 CVE-2007-1979 URL:http://www.securityfocus.com/bid/23286  View
252646 25336 CVE-2007-1979 VUPEN:ADV-2007-1206  View
252647 25336 CVE-2007-1979 URL:http://www.vupen.com/english/advisories/2007/1206  View
252648 25336 CVE-2007-1979 SECUNIA:24761  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54985 JVNDB-2007-003677 Metamod-P の safevoid_vsnprintf 機能におけるサービス運用妨害 (DoS) の脆弱性 Windows 上で稼動する Metamod-P の safevoid_vsnprintf 機能には、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-1981 25336 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003677.html  View