CVE

Id
26883  
CVE No.
CVE-2007-3526  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the news_id parameter to view_news.php, (2) the cat_id parameter to view_events.php, or (3) the member_id parameter to video_gallery.php.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274425 26883 CVE-2007-3526 MILW0RM:4128  View
274426 26883 CVE-2007-3526 URL:http://www.milw0rm.com/exploits/4128  View
274427 26883 CVE-2007-3526 BID:24726  View
274428 26883 CVE-2007-3526 URL:http://www.securityfocus.com/bid/24726  View
274429 26883 CVE-2007-3526 OSVDB:38960  View
274430 26883 CVE-2007-3526 URL:http://osvdb.org/38960  View
274431 26883 CVE-2007-3526 OSVDB:38961  View
274432 26883 CVE-2007-3526 URL:http://osvdb.org/38961  View
274433 26883 CVE-2007-3526 OSVDB:38962  View
274434 26883 CVE-2007-3526 URL:http://osvdb.org/38962  View
274435 26883 CVE-2007-3526 XF:buddyzone-id-sql-injection(35187)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53580 JVNDB-2007-002272 DAR の blowfish モードにおけるファイルを復号される脆弱性 DAR の blowfish モードは、弱い Blowfish-CBC 暗号化を使用するため、ファイルを復号される脆弱性が存在します。 CVE-2007-3528 26883 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002272.html  View