CVE

Id
26601  
CVE No.
CVE-2007-3244  
Status
Candidate  
Description
SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors to forums/bb-edit.php, as demonstrated by a PRE element, aka the "quircky slashes bug."  
Phase
Assigned (20070614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270065 26601 CVE-2007-3244 CONFIRM:http://bbpress.org/blog/2007/02/bbpress-081/  View
270066 26601 CVE-2007-3244 CONFIRM:http://trac.bbpress.org/changeset/717  View
270067 26601 CVE-2007-3244 CONFIRM:http://trac.bbpress.org/ticket/592  View
270068 26601 CVE-2007-3244 BID:24488  View
270069 26601 CVE-2007-3244 URL:http://www.securityfocus.com/bid/24488  View
270070 26601 CVE-2007-3244 VUPEN:ADV-2007-2219  View
270071 26601 CVE-2007-3244 URL:http://www.vupen.com/english/advisories/2007/2219  View
270072 26601 CVE-2007-3244 OSVDB:36606  View
270073 26601 CVE-2007-3244 URL:http://osvdb.org/36606  View
270074 26601 CVE-2007-3244 SECUNIA:25696  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55317 JVNDB-2007-004009 IRC Services の modules/chanserv/set.c の do_set_password 関数における新パスワードを取得される脆弱性 IRC Services の modules/chanserv/set.c の do_set_password 関数は、パスワードの変更 (ChanServ SET PASSWORD) 全体にチャネル作成者の特権保持するため、自動化された電子メール経由で新パスワードを取得される、または新パスワードを知らなくても特権操作を実行される脆弱性が存在します。 CVE-2007-3246 26601 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004009.html  View