NVD

Id
54506  
Name
CVE-2007-2339  
Description
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via (1) a modified recipients parameter name in (a) pm.php; (2) the curr parameter to the (b) badwords (aka censorlist) or (c) banlist module in admin.php; or (3) the "Edit groups / Add group" field in the (d) groups module in admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-27  
Modified Date
2011-03-07  
Seq
2007-2339  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276439 54506 CVE-2007-2339 2617  View
276440 54506 CVE-2007-2339 1017936  View
276441 54506 CVE-2007-2339 http://www.phorum.org/story.php?76  View
276442 54506 CVE-2007-2339 20070419 [waraxe-2007-SA#049] - Multiple vulnerabilities in Phorum 5.1.20  View
276443 54506 CVE-2007-2339 23616  View
276444 54506 CVE-2007-2339 ADV-2007-1479  View
276445 54506 CVE-2007-2339 http://www.waraxe.us/advisory-49.html  View
276446 54506 CVE-2007-2339 phorum-multiple-scripts-sql-injection(34081)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55081 JVNDB-2007-003773 Phorum における SQL インジェクションの脆弱性 Phorum には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2339 25694 CVE-2007-2339 54506 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003773.html 2007-04-18 2012-09-25 View