NVD

Id
53329  
Name
CVE-2007-1122  
Description
Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 and 1.01 allow remote attackers to execute arbitrary SQL commands via the id parameter to the (1) updateRow and (2) deleteRow functions in functions.php, a variant of a SQL injection issue that was fixed in 1.01. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-02-26  
Modified Date
2011-03-07  
Seq
2007-1122  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270035 53329 CVE-2007-1122 http://sourceforge.net/project/downloading.php?group_id=153333&use_mirror=osdn&filename=abc-1.02.zip  View
270036 53329 CVE-2007-1122 22685  View
270037 53329 CVE-2007-1122 ADV-2007-0715  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56455 JVNDB-2007-005147 Mathis Dirksen-Thedens ZephyrSoft Toolbox ABC における SQL インジェクションの脆弱性 Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) は、1.01 で修正された SQL インジェクション問題の変種の不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2007-1122 24477 CVE-2007-1122 53329 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005147.html 2007-02-26 2012-12-20 View