CVE

Id
26607  
CVE No.
CVE-2007-3250  
Status
Candidate  
Description
SQL injection vulnerability in mod_banners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mb_tracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected.  
Phase
Assigned (20070618)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270134 26607 CVE-2007-3250 BUGTRAQ:20070614 Elxis CMS <= 2006.4 - banner module - sql injection  View
270135 26607 CVE-2007-3250 URL:http://www.securityfocus.com/archive/1/archive/1/471399/100/0/threaded  View
270136 26607 CVE-2007-3250 MISC:http://www.elxis.org/index.php?option=com_mtree&task=viewlink&link_id=98&Itemid=140  View
270137 26607 CVE-2007-3250 BID:24478  View
270138 26607 CVE-2007-3250 URL:http://www.securityfocus.com/bid/24478  View
270139 26607 CVE-2007-3250 OSVDB:36305  View
270140 26607 CVE-2007-3250 URL:http://osvdb.org/36305  View
270141 26607 CVE-2007-3250 VUPEN:ADV-2007-2218  View
270142 26607 CVE-2007-3250 URL:http://www.vupen.com/english/advisories/2007/2218  View
270143 26607 CVE-2007-3250 SECUNIA:25684  View
270144 26607 CVE-2007-3250 URL:http://secunia.com/advisories/25684  View
270145 26607 CVE-2007-3250 SREASON:2806  View
270146 26607 CVE-2007-3250 URL:http://securityreason.com/securityalert/2806  View
270147 26607 CVE-2007-3250 XF:elxis-modbanners-sql-injection(34873)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57009 JVNDB-2007-005701 PortalApp におけるデータベースをダウンロードされる脆弱性 PortalApp には、不十分なアクセスコントロールを伴う Web ルート配下に重要な情報を格納するため、データベースをダウンロードされる脆弱性が存在します。 CVE-2007-3252 26607 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005701.html  View