CVE

Id
26349  
CVE No.
CVE-2007-2992  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields.  
Phase
Assigned (20070604)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
266851 26349 CVE-2007-2992 BUGTRAQ:20070601 static XSS / SQL-Injection in Omegasoft Insel  View
266852 26349 CVE-2007-2992 URL:http://www.securityfocus.com/archive/1/archive/1/470240/100/0/threaded  View
266853 26349 CVE-2007-2992 FULLDISC:20070601 static XSS / SQL-Injection in Omegasoft Insel  View
266854 26349 CVE-2007-2992 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0003.html  View
266855 26349 CVE-2007-2992 BID:24275  View
266856 26349 CVE-2007-2992 URL:http://www.securityfocus.com/bid/24275  View
266857 26349 CVE-2007-2992 OSVDB:37020  View
266858 26349 CVE-2007-2992 URL:http://osvdb.org/37020  View
266859 26349 CVE-2007-2992 SECUNIA:25545  View
266860 26349 CVE-2007-2992 URL:http://secunia.com/advisories/25545  View
266861 26349 CVE-2007-2992 SREASON:2759  View
266862 26349 CVE-2007-2992 URL:http://securityreason.com/securityalert/2759  View
266863 26349 CVE-2007-2992 XF:omegasoft-multiple-sql-injection(34678)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53434 JVNDB-2007-002126 DGNews の news.php における SQL インジェクションの脆弱性 DGNews の news.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2994 26349 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002126.html  View