CVE

Id
27140  
CVE No.
CVE-2007-3783  
Status
Candidate  
Description
SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4.  
Phase
Assigned (20070715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277883 27140 CVE-2007-3783 BUGTRAQ:20070711 durito: enVivo!CMS SQL injection  View
277884 27140 CVE-2007-3783 URL:http://www.securityfocus.com/archive/1/archive/1/473355/100/0/threaded  View
277885 27140 CVE-2007-3783 FULLDISC:20070711 durito: enVivo!CMS SQL injection  View
277886 27140 CVE-2007-3783 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064555.html  View
277887 27140 CVE-2007-3783 MISC:http://securityvulns.ru/Rdocument425.html  View
277888 27140 CVE-2007-3783 VUPEN:ADV-2007-2503  View
277889 27140 CVE-2007-3783 URL:http://www.vupen.com/english/advisories/2007/2503  View
277890 27140 CVE-2007-3783 OSVDB:36246  View
277891 27140 CVE-2007-3783 URL:http://osvdb.org/36246  View
277892 27140 CVE-2007-3783 SECUNIA:26020  View
277893 27140 CVE-2007-3783 URL:http://secunia.com/advisories/26020  View
277894 27140 CVE-2007-3783 SREASON:2897  View
277895 27140 CVE-2007-3783 URL:http://securityreason.com/securityalert/2897  View
277896 27140 CVE-2007-3783 XF:envivocms-default-sql-injection(35342)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53660 JVNDB-2007-002352 EldoS sbb の PGPBBox.dll の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 EldoS SecureBlackbox (sbb) の PGPBBox.dll の特定の ActiveX コントロールには、絶対パストラバーサルの脆弱性が存在します。 CVE-2007-3785 27140 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002352.html  View