NVD

Id
54144  
Name
CVE-2007-1974  
Description
SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via the articleid parameter to print.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-11  
Modified Date
2011-03-07  
Seq
2007-1974  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274567 54144 CVE-2007-1974 http://addons.zarilia.com/index.php?page_type=static&id=43  View
274568 54144 CVE-2007-1974 20070411 WF-Sections SQL injection vendor ack; shows up in other modules  View
274569 54144 CVE-2007-1974 3644  View
274570 54144 CVE-2007-1974 3645  View
274571 54144 CVE-2007-1974 3646  View
274572 54144 CVE-2007-1974 20080218 XOOPS Module section SQL Injection(articleid)  View
274573 54144 CVE-2007-1974 23258  View
274574 54144 CVE-2007-1974 23259  View
274575 54144 CVE-2007-1974 23261  View
274576 54144 CVE-2007-1974 ADV-2007-1207  View
274577 54144 CVE-2007-1974 ADV-2007-1208  View
274578 54144 CVE-2007-1974 ADV-2007-1209  View
274579 54144 CVE-2007-1974 http://www.xoops.org/modules/newbb/viewtopic.php?viewmode=flat&order=ASC&topic_id=58229&forum=4&move=next&topic_time=1176217411  View
274580 54144 CVE-2007-1974 http://www.xoops.org/modules/news/article.php?storyid=3717  View
274581 54144 CVE-2007-1974 xoops-wfsection-print-sql-injection(33378)  View
274582 54144 CVE-2007-1974 xoops-zmagazine-print-sql-injection(33379)  View
274583 54144 CVE-2007-1974 xoops-xfsection-print-sql-injection(33380)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56698 JVNDB-2007-005390 Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性 (1) Zmagazine、(2) Happy Linux XFsectionなどの Xoops モジュールで使用される WF-Section の class/wfsarticle.php の getArticle 関数には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1974 25329 CVE-2007-1974 54144 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005390.html 2007-04-09 2012-12-20 View