CVE

Id
26647  
CVE No.
CVE-2007-3290  
Status
Candidate  
Description
categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a " (quote) character in the cid parameter, which reveals the path in a forced SQL error message.  
Phase
Assigned (20070620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270667 26647 CVE-2007-3290 MILW0RM:4082  View
270668 26647 CVE-2007-3290 URL:http://www.milw0rm.com/exploits/4082  View
270669 26647 CVE-2007-3290 BID:24580  View
270670 26647 CVE-2007-3290 URL:http://www.securityfocus.com/bid/24580  View
270671 26647 CVE-2007-3290 OSVDB:37490  View
270672 26647 CVE-2007-3290 URL:http://osvdb.org/37490  View
270673 26647 CVE-2007-3290 SECUNIA:25744  View
270674 26647 CVE-2007-3290 URL:http://secunia.com/advisories/25744  View
270675 26647 CVE-2007-3290 XF:livecms-categoria-path-disclosure(35147)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55329 JVNDB-2007-004021 LiveCMS における任意の PHP コードをアップロードされる脆弱性 LiveCMS は、ファイルをアップロードされることにより、任意の PHP コードをアップロードおよび実行される脆弱性が存在します。 CVE-2007-3292 26647 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004021.html  View