CVE

Id
26092  
CVE No.
CVE-2007-2735  
Status
Candidate  
Description
SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id_reserv parameter.  
Phase
Assigned (20070517)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262479 26092 CVE-2007-2735 MILW0RM:3931  View
262480 26092 CVE-2007-2735 URL:http://www.milw0rm.com/exploits/3931  View
262481 26092 CVE-2007-2735 BID:23997  View
262482 26092 CVE-2007-2735 URL:http://www.securityfocus.com/bid/23997  View
262483 26092 CVE-2007-2735 OSVDB:35380  View
262484 26092 CVE-2007-2735 URL:http://osvdb.org/35380  View
262485 26092 CVE-2007-2735 VUPEN:ADV-2007-1828  View
262486 26092 CVE-2007-2735 URL:http://www.vupen.com/english/advisories/2007/1828  View
262487 26092 CVE-2007-2735 SECUNIA:25298  View
262488 26092 CVE-2007-2735 URL:http://secunia.com/advisories/25298  View
262489 26092 CVE-2007-2735 XF:resmanager-editday-sql-injection(34310)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56887 JVNDB-2007-005579 Xoops 用の MyConference モジュールにおける SQL インジェクションの脆弱性 Xoops 用の MyConference モジュールの index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2737 26092 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005579.html  View