CVE

Id
25587  
CVE No.
CVE-2007-2230  
Status
Candidate  
Description
SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the ofinterest parameter in a light search query, (2) description parameter in the advanced search query, and possibly other vectors.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255631 25587 CVE-2007-2230 BUGTRAQ:20070424 Security Advisory: CA CleverPath SQL Injection  View
255632 25587 CVE-2007-2230 URL:http://www.securityfocus.com/archive/1/archive/1/466760/100/0/threaded  View
255633 25587 CVE-2007-2230 FULLDISC:20070424 Security Advisory: CA CleverPath SQL Injection  View
255634 25587 CVE-2007-2230 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0648.html  View
255635 25587 CVE-2007-2230 MISC:http://www.hacktics.com/AdvCleverPathApr07.html  View
255636 25587 CVE-2007-2230 CONFIRM:ftp://ftp.ca.com/pub/portal/4.71/4.71.001_188_070329/readme_4.71.001_188_070329.txt  View
255637 25587 CVE-2007-2230 CONFIRM:http://supportconnectw.ca.com/public/cp/portal/infodocs/portal-secnot.asp  View
255638 25587 CVE-2007-2230 CONFIRM:http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=136879  View
255639 25587 CVE-2007-2230 BID:23671  View
255640 25587 CVE-2007-2230 URL:http://www.securityfocus.com/bid/23671  View
255641 25587 CVE-2007-2230 VUPEN:ADV-2007-1544  View
255642 25587 CVE-2007-2230 URL:http://www.vupen.com/english/advisories/2007/1544  View
255643 25587 CVE-2007-2230 OSVDB:34128  View
255644 25587 CVE-2007-2230 URL:http://www.osvdb.org/34128  View
255645 25587 CVE-2007-2230 SECTRACK:1017970  View
255646 25587 CVE-2007-2230 URL:http://www.securitytracker.com/id?1017970  View
255647 25587 CVE-2007-2230 SECUNIA:25002  View
255648 25587 CVE-2007-2230 URL:http://secunia.com/advisories/25002  View
255649 25587 CVE-2007-2230 XF:ca-cpp-search-sql-injection(33853)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53189 JVNDB-2007-001881 Cosign の CHECK コマンドにおける認証要件を回避される脆弱性 Cosign の CHECK コマンドには、認証要件を回避される脆弱性が存在します。 CVE-2007-2232 25587 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001881.html  View