CVE

Id
25983  
CVE No.
CVE-2007-2626  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: CVE disputes this issue, because "username" does not exist, and the password is not used in any queries.  
Phase
Assigned (20070511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
261195 25983 CVE-2007-2626 BUGTRAQ:20070503 SchoolBoard (admin.php) Remote Login Bypass SQL Injection Vulnerability  View
261196 25983 CVE-2007-2626 URL:http://www.securityfocus.com/archive/1/archive/1/467486/100/0/threaded  View
261197 25983 CVE-2007-2626 VIM:20070511 probably false: SchoolBoard (admin.php) SQL injection  View
261198 25983 CVE-2007-2626 URL:http://www.attrition.org/pipermail/vim/2007-May/001609.html  View
261199 25983 CVE-2007-2626 BID:23798  View
261200 25983 CVE-2007-2626 URL:http://www.securityfocus.com/bid/23798  View
261201 25983 CVE-2007-2626 OSVDB:36162  View
261202 25983 CVE-2007-2626 URL:http://osvdb.org/36162  View
261203 25983 CVE-2007-2626 SREASON:2695  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55142 JVNDB-2007-003834 PHP 用の Justin Koivisto SecurityAdmin における PHP リモートファイルインクルージョンの脆弱性 PHP 用の Justin Koivisto SecurityAdmin の include/logout.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2628 25983 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003834.html  View