NVD

Id
54537  
Name
CVE-2007-2370  
Description
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-30  
Modified Date
2008-09-05  
Seq
2007-2370  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276587 54537 CVE-2007-2370 20070405 true: XOOPS Module Jobs <= 2.4 (cid) SQL Injection Exploit  View
276588 54537 CVE-2007-2370 3672  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56792 JVNDB-2007-005484 XOOPS 用の John Mordo モジュールにおける SQL インジェクションの脆弱性 XOOPS 用の John Mordo モジュールの index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2370 25725 CVE-2007-2370 54537 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005484.html 2007-04-30 2012-12-20 View