CVE

Id
26895  
CVE No.
CVE-2007-3538  
Status
Candidate  
Description
SQL injection vulnerability in qtg_msg_view.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274544 26895 CVE-2007-3538 MISC:http://pridels-team.blogspot.com/2007/06/quicktalk-guestbook-sql-inj.html  View
274545 26895 CVE-2007-3538 BID:24667  View
274546 26895 CVE-2007-3538 URL:http://www.securityfocus.com/bid/24667  View
274547 26895 CVE-2007-3538 OSVDB:38938  View
274548 26895 CVE-2007-3538 URL:http://osvdb.org/38938  View
274549 26895 CVE-2007-3538 XF:quicktalk-qtgmsgview-sql-injection(35101)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57105 JVNDB-2007-005797 rwAuction Pro の search.asp におけるクロスサイトスクリプティングの脆弱性 rwAuction Pro の search.asp には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3540 26895 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005797.html  View