CVE

Id
28167  
CVE No.
CVE-2007-4810  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to execute arbitrary SQL commands via (1) the ge_id parameter in a list.artists action to explore.php or (2) the id parameter in a show.tracks action to xml.php.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292247 28167 CVE-2007-4810 BUGTRAQ:20070908 Netjuke 1.0-rc2 - sql injection & XSS  View
292248 28167 CVE-2007-4810 URL:http://www.securityfocus.com/archive/1/archive/1/478871/100/0/threaded  View
292249 28167 CVE-2007-4810 BID:25600  View
292250 28167 CVE-2007-4810 URL:http://www.securityfocus.com/bid/25600  View
292251 28167 CVE-2007-4810 OSVDB:38833  View
292252 28167 CVE-2007-4810 URL:http://osvdb.org/38833  View
292253 28167 CVE-2007-4810 OSVDB:38834  View
292254 28167 CVE-2007-4810 URL:http://osvdb.org/38834  View
292255 28167 CVE-2007-4810 SREASON:3110  View
292256 28167 CVE-2007-4810 URL:http://securityreason.com/securityalert/3110  View
292257 28167 CVE-2007-4810 XF:netjuke-explore-xml-sql-injection(36516)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52292 JVNDB-2007-000982 Apple Safari の document.location.hash の処理におけるバッファオーバーフローの脆弱性 Apple Safari には document.location.hash における文字列の取り扱いに不備があり、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4812 28167 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000982.html  View