CVE

Id
29936  
CVE No.
CVE-2007-6579  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlan_id parameter to (1) vlanview.php, (2) vlanedit.php, and (3) vlandel.php; the (4) assetclassgroup_id parameter to assetclassgroupview.php; the (5) subnet_id parameter to nodelist.php; and unspecified other vectors. NOTE: it was later reported that the vlanview.php and vlandel.php vectors are also in 0.4.  
Phase
Assigned (20071228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316531 29936 CVE-2007-6579 MILW0RM:4771  View
316532 29936 CVE-2007-6579 URL:http://www.milw0rm.com/exploits/4771  View
316533 29936 CVE-2007-6579 MISC:http://www.inj3ct-it.org/exploit/ipreg0.3.txt  View
316534 29936 CVE-2007-6579 BID:26993  View
316535 29936 CVE-2007-6579 URL:http://www.securityfocus.com/bid/26993  View
316536 29936 CVE-2007-6579 OSVDB:39776  View
316537 29936 CVE-2007-6579 URL:http://osvdb.org/39776  View
316538 29936 CVE-2007-6579 OSVDB:39777  View
316539 29936 CVE-2007-6579 URL:http://osvdb.org/39777  View
316540 29936 CVE-2007-6579 OSVDB:39778  View
316541 29936 CVE-2007-6579 URL:http://osvdb.org/39778  View
316542 29936 CVE-2007-6579 OSVDB:39779  View
316543 29936 CVE-2007-6579 URL:http://osvdb.org/39779  View
316544 29936 CVE-2007-6579 OSVDB:39780  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57791 JVNDB-2007-006483 Social Engine におけるディレクトリトラバーサルの脆弱性 Social Engine には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-6581 29936 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006483.html  View