CVE

Id
29944  
CVE No.
CVE-2007-6587  
Status
Candidate  
Description
SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  
Phase
Assigned (20071228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316615 29944 CVE-2007-6587 MISC:http://www.mwrinfosecurity.com/publications/mwri_plogger-photo-gallery-sql-injection-vulnerability_2007-12-17.pdf  View
316616 29944 CVE-2007-6587 MISC:http://packetstormsecurity.com/files/112947/Plogger-Photo-Gallery-SQL-Injection.html  View
316617 29944 CVE-2007-6587 MISC:http://packetstormsecurity.org/files/112947/Plogger-Photo-Gallery-SQL-Injection.html  View
316618 29944 CVE-2007-6587 MISC:https://labs.mwrinfosecurity.com/advisories/2007/12/17/plogger-sql-injection/  View
316619 29944 CVE-2007-6587 CONFIRM:http://dev.plogger.org/changeset/489  View
316620 29944 CVE-2007-6587 VIM:20120531 CVE-2012-2951 - believe this is a dupe  View
316621 29944 CVE-2007-6587 URL:http://attrition.org/pipermail/vim/2012-May/002556.html  View
316622 29944 CVE-2007-6587 BID:26958  View
316623 29944 CVE-2007-6587 URL:http://www.securityfocus.com/bid/26958  View
316624 29944 CVE-2007-6587 BID:53644  View
316625 29944 CVE-2007-6587 URL:http://www.securityfocus.com/bid/53644  View
316626 29944 CVE-2007-6587 OSVDB:39764  View
316627 29944 CVE-2007-6587 URL:http://www.osvdb.org/39764  View
316628 29944 CVE-2007-6587 XF:plogger-id-sql-injection(75789)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56087 JVNDB-2007-004779 Mozilla Firefox などの jar プロトコルハンドラにおける XSS 攻撃を実行される脆弱性 Mozilla Firefox および SeaMonkey の jar プロトコルハンドラは、HTTP のリダイレクトを生成する URL パラメータ内部を取得している際、元のドメインを更新しないため、クロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性が存在します。 CVE-2007-6589 29944 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004779.html  View