CVE

Id
26106  
CVE No.
CVE-2007-2749  
Status
Candidate  
Description
SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrary SQL commands via the questionref parameter in a display action.  
Phase
Assigned (20070517)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262612 26106 CVE-2007-2749 MILW0RM:3943  View
262613 26106 CVE-2007-2749 URL:http://www.milw0rm.com/exploits/3943  View
262614 26106 CVE-2007-2749 BID:24032  View
262615 26106 CVE-2007-2749 URL:http://www.securityfocus.com/bid/24032  View
262616 26106 CVE-2007-2749 OSVDB:36091  View
262617 26106 CVE-2007-2749 URL:http://osvdb.org/36091  View
262618 26106 CVE-2007-2749 SECUNIA:25297  View
262619 26106 CVE-2007-2749 URL:http://secunia.com/advisories/25297  View
262620 26106 CVE-2007-2749 XF:faqengine-question-sql-injection(34355)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56896 JVNDB-2007-005588 PHPGlossar における PHP リモートファイルインクルージョンの脆弱性 PHPGlossar には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2751 26106 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005588.html  View