CVE

Id
29959  
CVE No.
CVE-2007-6602  
Status
Candidate  
Description
SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.  
Phase
Assigned (20071231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316960 29959 CVE-2007-6602 MILW0RM:4805  View
316961 29959 CVE-2007-6602 URL:http://www.milw0rm.com/exploits/4805  View
316962 29959 CVE-2007-6602 MISC:http://seclog.de/pub/seclog-2007-001.txt  View
316963 29959 CVE-2007-6602 CONFIRM:http://noserub.googlecode.com/svn/trunk/app/models/identity.php  View
316964 29959 CVE-2007-6602 BID:27065  View
316965 29959 CVE-2007-6602 URL:http://www.securityfocus.com/bid/27065  View
316966 29959 CVE-2007-6602 OSVDB:39832  View
316967 29959 CVE-2007-6602 URL:http://osvdb.org/39832  View
316968 29959 CVE-2007-6602 SECUNIA:28259  View
316969 29959 CVE-2007-6602 URL:http://secunia.com/advisories/28259  View
316970 29959 CVE-2007-6602 XF:noserub-identity-sql-injection(39318)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57794 JVNDB-2007-006486 XCMS の index.php におけるディレクトリトラバーサルの脆弱性 XCMS の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-6604 29959 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006486.html  View