CVE

Id
26872  
CVE No.
CVE-2007-3515  
Status
Candidate  
Description
SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274311 26872 CVE-2007-3515 MILW0RM:4130  View
274312 26872 CVE-2007-3515 URL:http://www.milw0rm.com/exploits/4130  View
274313 26872 CVE-2007-3515 BID:24716  View
274314 26872 CVE-2007-3515 URL:http://www.securityfocus.com/bid/24716  View
274315 26872 CVE-2007-3515 VUPEN:ADV-2007-2401  View
274316 26872 CVE-2007-3515 URL:http://www.vupen.com/english/advisories/2007/2401  View
274317 26872 CVE-2007-3515 OSVDB:36337  View
274318 26872 CVE-2007-3515 URL:http://osvdb.org/36337  View
274319 26872 CVE-2007-3515 SECUNIA:25899  View
274320 26872 CVE-2007-3515 URL:http://secunia.com/advisories/25899  View
274321 26872 CVE-2007-3515 XF:totalcalendar-viewevent-sql-injection(35189)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53575 JVNDB-2007-002267 Claroline におけるクロスサイトスクリプティングの脆弱性 Claroline には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3517 26872 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002267.html  View