CVE

Id
29437  
CVE No.
CVE-2007-6080  
Status
Candidate  
Description
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NOTE: it was later reported that 1.0.13 is also affected.  
Phase
Assigned (20071121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
309551 29437 CVE-2007-6080 MILW0RM:4637  View
309552 29437 CVE-2007-6080 URL:http://www.milw0rm.com/exploits/4637  View
309553 29437 CVE-2007-6080 MISC:http://www.securityfocus.com/bid/31941/exploit  View
309554 29437 CVE-2007-6080 BID:26505  View
309555 29437 CVE-2007-6080 URL:http://www.securityfocus.com/bid/26505  View
309556 29437 CVE-2007-6080 BID:31941  View
309557 29437 CVE-2007-6080 URL:http://www.securityfocus.com/bid/31941  View
309558 29437 CVE-2007-6080 VUPEN:ADV-2007-3962  View
309559 29437 CVE-2007-6080 URL:http://www.vupen.com/english/advisories/2007/3962  View
309560 29437 CVE-2007-6080 XF:bcoos-click-sql-injection(38594)  View
309561 29437 CVE-2007-6080 URL:http://xforce.iss.net/xforce/xfdb/38594  View
309562 29437 CVE-2007-6080 XF:bcoos-bid-sql-injection(46156)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57656 JVNDB-2007-006348 Sciurus Hosting Panel の acp/savenews.php における任意の PHP コードを挿入される脆弱性 Sciurus Hosting Panel の acp/savenews.php は、直接静的コードを挿入されることにより、任意の PHP コードを挿入される脆弱性が存在します。 CVE-2007-6082 29437 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006348.html  View