NVD

Id
56581  
Name
CVE-2007-4456  
Description
SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter. NOTE: it was later reported that 2.40 is also affected, and that the component can be used in Joomla! in addition to Mambo.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-21  
Modified Date
2008-09-05  
Seq
2007-4456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288285 56581 CVE-2007-4456 3041  View
288286 56581 CVE-2007-4456 4296  View
288287 56581 CVE-2007-4456 20070820 Mambo Component SimpleFAQ V2.11 - Remote SQL Injection  View
288288 56581 CVE-2007-4456 20070820 Joomla Component SimpleFAQ V2.11 - Remote SQL Injection  View
288289 56581 CVE-2007-4456 25376  View
288290 56581 CVE-2007-4456 simplefaq-index-sql-injection(36113)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55618 JVNDB-2007-004310 Mambo 用の SimpleFAQ コンポーネントにおける SQL インジェクションの脆弱性 Mambo 用の SimpleFAQ (com_simplefaq) コンポーネントの index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-4456 27811 CVE-2007-4456 56581 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004310.html 2007-08-21 2012-09-25 View