CVE

Id
25849  
CVE No.
CVE-2007-2492  
Status
Candidate  
Description
SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a journal_comment action.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259436 25849 CVE-2007-2492 BUGTRAQ:20070502 Post Nuke v4bJournal Module Sql Inject  View
259437 25849 CVE-2007-2492 URL:http://www.securityfocus.com/archive/1/archive/1/467387/100/0/threaded  View
259438 25849 CVE-2007-2492 MILW0RM:3835  View
259439 25849 CVE-2007-2492 URL:http://www.milw0rm.com/exploits/3835  View
259440 25849 CVE-2007-2492 BID:23777  View
259441 25849 CVE-2007-2492 URL:http://www.securityfocus.com/bid/23777  View
259442 25849 CVE-2007-2492 VUPEN:ADV-2007-1632  View
259443 25849 CVE-2007-2492 URL:http://www.vupen.com/english/advisories/2007/1632  View
259444 25849 CVE-2007-2492 OSVDB:35703  View
259445 25849 CVE-2007-2492 URL:http://osvdb.org/35703  View
259446 25849 CVE-2007-2492 SREASON:2674  View
259447 25849 CVE-2007-2492 URL:http://securityreason.com/securityalert/2674  View
259448 25849 CVE-2007-2492 XF:pnjournal-index-sql-injection(34024)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55109 JVNDB-2007-003801 PowerPointViewer.ocx の PowerPointOCX ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 PowerPointViewer.ocx の PowerPointOCX ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-2494 25849 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003801.html  View