CVE

Id
29702  
CVE No.
CVE-2007-6345  
Status
Candidate  
Description
SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the value parameter to the pack_var function in module/db.lib/db_mysql.lib. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20071213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
313240 29702 CVE-2007-6345 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=560073  View
313241 29702 CVE-2007-6345 BID:26829  View
313242 29702 CVE-2007-6345 URL:http://www.securityfocus.com/bid/26829  View
313243 29702 CVE-2007-6345 OSVDB:39145  View
313244 29702 CVE-2007-6345 URL:http://osvdb.org/39145  View
313245 29702 CVE-2007-6345 SECUNIA:28014  View
313246 29702 CVE-2007-6345 URL:http://secunia.com/advisories/28014  View
313247 29702 CVE-2007-6345 XF:auroraframework-dbmysql-sql-injection(38999)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57730 JVNDB-2007-006422 ViArt CMS などの blocks/block_site_map.php における PHP リモートファイルインクルージョンの脆弱性 ViArt (1) CMS、(2) HelpDesk、(3) Shop Evaluation、および (4) Shop Free の blocks/block_site_map.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-6347 29702 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006422.html  View