CVE

Id
26604  
CVE No.
CVE-2007-3247  
Status
Candidate  
Description
SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly related to improper input validation of the PATH_INFO (PHP_SELF) by virtuemart_parser.php.  
Phase
Assigned (20070618)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270096 26604 CVE-2007-3247 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=516206  View
270097 26604 CVE-2007-3247 CONFIRM:http://virtuemart.net/index.php?option=com_content&task=view&id=250&Itemid=57  View
270098 26604 CVE-2007-3247 BID:24485  View
270099 26604 CVE-2007-3247 URL:http://www.securityfocus.com/bid/24485  View
270100 26604 CVE-2007-3247 VUPEN:ADV-2007-2217  View
270101 26604 CVE-2007-3247 URL:http://www.vupen.com/english/advisories/2007/2217  View
270102 26604 CVE-2007-3247 OSVDB:36889  View
270103 26604 CVE-2007-3247 URL:http://osvdb.org/36889  View
270104 26604 CVE-2007-3247 SECUNIA:25698  View
270105 26604 CVE-2007-3247 URL:http://secunia.com/advisories/25698  View
270106 26604 CVE-2007-3247 XF:virtuemart-unspecified-sql-injection(34879)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55318 JVNDB-2007-004010 Joomla! 用の Letterman Subscriber におけるクロスサイトスクリプティングの脆弱性 Joomla! 用の Letterman Subscriber の mod_lettermansubscribe.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3249 26604 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004010.html  View