CVE

Id
25891  
CVE No.
CVE-2007-2534  
Status
Candidate  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use.  
Phase
Assigned (20070508)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
260050 25891 CVE-2007-2534 BUGTRAQ:20070506 phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability  View
260051 25891 CVE-2007-2534 URL:http://www.securityfocus.com/archive/1/archive/1/467839/100/0/threaded  View
260052 25891 CVE-2007-2534 VIM:20070508 false: phpHoo3 Login SQL injection  View
260053 25891 CVE-2007-2534 URL:http://www.attrition.org/pipermail/vim/2007-May/001597.html  View
260054 25891 CVE-2007-2534 BID:23854  View
260055 25891 CVE-2007-2534 URL:http://www.securityfocus.com/bid/23854  View
260056 25891 CVE-2007-2534 OSVDB:36180  View
260057 25891 CVE-2007-2534 URL:http://osvdb.org/36180  View
260058 25891 CVE-2007-2534 SREASON:2669  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56830 JVNDB-2007-005522 PicoZip におけるサービス運用妨害 (DoS) の脆弱性 PicoZip には、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2007-2536 25891 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005522.html  View