NVD

Id
56242  
Name
CVE-2007-4111  
Description
SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-31  
Modified Date
2008-09-05  
Seq
2007-4111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286435 56242 CVE-2007-4111 http://outlaw.aria-security.info/?p=10  View
286436 56242 CVE-2007-4111 2949  View
286437 56242 CVE-2007-4111 20070728 Real Estate listing website application template SQL Injection  View
286438 56242 CVE-2007-4111 25115  View
286439 56242 CVE-2007-4111 realestate-logging-sql-injection(35667)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53760 JVNDB-2007-002452 Real Estate listing website アプリケーションテンプレートのログインスクリプトにおける SQL インジェクションの脆弱性 Real Estate listing website アプリケーションテンプレートのログインスクリプトには、SQL インジェクションの脆弱性が存在します。 CVE-2007-4111 27466 CVE-2007-4111 56242 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002452.html 2007-07-31 2012-06-26 View