NVD

Id
57046  
Name
CVE-2007-4956  
Description
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav parameter to index.php in a browser aff action in the stats module.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-09-18  
Modified Date
2008-11-15  
Seq
2007-4956  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291144 57046 CVE-2007-4956 http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=29  View
291145 57046 CVE-2007-4956 4412  View
291146 57046 CVE-2007-4956 4413  View
291147 57046 CVE-2007-4956 4414  View
291148 57046 CVE-2007-4956 25679  View
291149 57046 CVE-2007-4956 kwsphp-stats-index-sql-injection(36634)  View
291150 57046 CVE-2007-4956 kwsphp-memberspace-index-sql-injection(36635)  View
291151 57046 CVE-2007-4956 kwsphp-login-sql-injection(36636)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55715 JVNDB-2007-004407 KwsPHP における SQL インジェクションの脆弱性 KwsPHP には、SQL インジェクションの脆弱性が存在します。 CVE-2007-4956 28311 CVE-2007-4956 57046 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004407.html 2007-09-18 2012-09-25 View