CVE

Id
29668  
CVE No.
CVE-2007-6311  
Status
Candidate  
Description
SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows remote attackers to execute arbitrary SQL commands via the nav_ID parameter.  
Phase
Assigned (20071211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
312775 29668 CVE-2007-6311 BUGTRAQ:20071210 Falt4 CMS Security Report/Advisory  View
312776 29668 CVE-2007-6311 URL:http://www.securityfocus.com/archive/1/archive/1/484813/100/0/threaded  View
312777 29668 CVE-2007-6311 MILW0RM:4711  View
312778 29668 CVE-2007-6311 URL:http://www.milw0rm.com/exploits/4711  View
312779 29668 CVE-2007-6311 MISC:http://www.h-labs.org/blog/2007/12/05/falt4_cms_security_report_advisory.html  View
312780 29668 CVE-2007-6311 CONFIRM:http://sourceforge.net/forum/forum.php?forum_id=762931  View
312781 29668 CVE-2007-6311 BID:26786  View
312782 29668 CVE-2007-6311 URL:http://www.securityfocus.com/bid/26786  View
312783 29668 CVE-2007-6311 SECUNIA:28045  View
312784 29668 CVE-2007-6311 URL:http://secunia.com/advisories/28045  View
312785 29668 CVE-2007-6311 SREASON:3436  View
312786 29668 CVE-2007-6311 URL:http://securityreason.com/securityalert/3436  View
312787 29668 CVE-2007-6311 XF:falt4-index-sql-injection(38950)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52436 JVNDB-2007-001128 MySQL Server の BINLOG の処理に関連する権限昇格の脆弱性 MySQL Server には、BINLOG を実行するエンティティの妥当性を適切にチェックしないために、任意の BINLOG ステートメントを実行される脆弱性が存在します。 CVE-2007-6313 29668 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001128.html  View