CVE

Id
29699  
CVE No.
CVE-2007-6342  
Status
Candidate  
Description
SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.  
Phase
Assigned (20071213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
313208 29699 CVE-2007-6342 BUGTRAQ:20071207 Potential SQL injection vulnerability in Apache::AuthCAS  View
313209 29699 CVE-2007-6342 URL:http://www.securityfocus.com/archive/1/archive/1/484711/100/0/threaded  View
313210 29699 CVE-2007-6342 BUGTRAQ:20080323 Re: Potential SQL injection vulnerability in Apache::AuthCAS  View
313211 29699 CVE-2007-6342 URL:http://www.securityfocus.com/archive/1/archive/1/489993/100/0/threaded  View
313212 29699 CVE-2007-6342 CONFIRM:http://search.cpan.org/src/DCASTRO/Apache-AuthCAS-0.5/Changes  View
313213 29699 CVE-2007-6342 BID:26762  View
313214 29699 CVE-2007-6342 URL:http://www.securityfocus.com/bid/26762  View
313215 29699 CVE-2007-6342 SECUNIA:29492  View
313216 29699 CVE-2007-6342 URL:http://secunia.com/advisories/29492  View
313217 29699 CVE-2007-6342 SREASON:3439  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56023 JVNDB-2007-004715 Mcms Easy Web Make の modules/cms/index.php におけるディレクトリトラバーサルの脆弱性 Mcms Easy Web Make の modules/cms/index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-6344 29699 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004715.html  View