CVE

Id
26896  
CVE No.
CVE-2007-3539  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) t and (2) f parameters in (a) qti_ind_post.php and (b) qti_ind_post_prt.php; (3) dir and (4) order parameters in qti_ind_member.php; (5) id parameter in qti_usr.php; and the (6) f parameter in qti_ind_topic.php. NOTE: it was later reported that vector 5 also affects 1.4, 1.5, and 1.5.0.3.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274550 26896 CVE-2007-3539 MILW0RM:5222  View
274551 26896 CVE-2007-3539 URL:http://www.milw0rm.com/exploits/5222  View
274552 26896 CVE-2007-3539 MISC:http://pridels-team.blogspot.com/2007/06/quickticket-multiple-sql-inj.html  View
274553 26896 CVE-2007-3539 BID:28176  View
274554 26896 CVE-2007-3539 URL:http://www.securityfocus.com/bid/28176  View
274555 26896 CVE-2007-3539 OSVDB:42684  View
274556 26896 CVE-2007-3539 URL:http://osvdb.org/42684  View
274557 26896 CVE-2007-3539 OSVDB:37606  View
274558 26896 CVE-2007-3539 URL:http://osvdb.org/37606  View
274559 26896 CVE-2007-3539 OSVDB:38956  View
274560 26896 CVE-2007-3539 URL:http://osvdb.org/38956  View
274561 26896 CVE-2007-3539 OSVDB:38957  View
274562 26896 CVE-2007-3539 URL:http://osvdb.org/38957  View
274563 26896 CVE-2007-3539 OSVDB:38958  View
274564 26896 CVE-2007-3539 URL:http://osvdb.org/38958  View
274565 26896 CVE-2007-3539 OSVDB:38959  View
274566 26896 CVE-2007-3539 URL:http://osvdb.org/38959  View
274567 26896 CVE-2007-3539 VUPEN:ADV-2007-2367  View
274568 26896 CVE-2007-3539 URL:http://www.vupen.com/english/advisories/2007/2367  View
274569 26896 CVE-2007-3539 SECUNIA:29299  View
274570 26896 CVE-2007-3539 URL:http://secunia.com/advisories/29299  View
274571 26896 CVE-2007-3539 XF:quickticket-qtiusr-sql-injection(41065)  View
274572 26896 CVE-2007-3539 URL:http://xforce.iss.net/xforce/xfdb/41065  View
274573 26896 CVE-2007-3539 XF:quicktalkforum-multiple-sql-injection(35100)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51824 JVNDB-2007-000487 sHTTPd におけるクロスサイトスクリプティングの脆弱性 宇宙忍者猫団が提供する sHTTPd には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3541 26896 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000487.html  View