CVE

Id
25877  
CVE No.
CVE-2007-2520  
Status
Candidate  
Description
SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie.  
Phase
Assigned (20070507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259817 25877 CVE-2007-2520 BUGTRAQ:20070625 MyNews version 0.10 SQL Injection Vulnerability  View
259818 25877 CVE-2007-2520 URL:http://www.securityfocus.com/archive/1/archive/1/472203/100/0/threaded  View
259819 25877 CVE-2007-2520 MISC:http://www.netvigilance.com/advisory0025  View
259820 25877 CVE-2007-2520 BID:24621  View
259821 25877 CVE-2007-2520 URL:http://www.securityfocus.com/bid/24621  View
259822 25877 CVE-2007-2520 OSVDB:34274  View
259823 25877 CVE-2007-2520 URL:http://www.osvdb.org/34274  View
259824 25877 CVE-2007-2520 SREASON:2834  View
259825 25877 CVE-2007-2520 URL:http://securityreason.com/securityalert/2834  View
259826 25877 CVE-2007-2520 XF:mynews-admin-sql-injection(35049)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53286 JVNDB-2007-001978 複数の CA 製品の inoWeb Console Server におけるスタックベースのバッファオーバーフローの脆弱性 CA Anti-Virus for the Enterprise、Threat Manager、Anti-Spyware for the Enterprise および Protection Suites の inoWeb Console Server には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-2522 25877 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001978.html  View