NVD

Id
57959  
Name
CVE-2007-5934  
Description
The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2 application, as demonstrated by a file:// URL or a URL for an intranet web site.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-11-13  
Modified Date
2011-03-07  
Seq
2007-5934  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296708 57959 CVE-2007-5934 http://bugs.gentoo.org/show_bug.cgi?id=198446  View
296709 57959 CVE-2007-5934 [PEAR-CVS] 20070503 cvs: pear /MDB2 MDB2.php package.php /MDB2/MDB2/Driver mysql.php mysqli.php oci8.php pgs  View
296710 57959 CVE-2007-5934 http://pear.php.net/bugs/bug.php?id=10024  View
296711 57959 CVE-2007-5934 http://pear.php.net/package/MDB2/download/2.5.0a1  View
296712 57959 CVE-2007-5934 GLSA-200712-05  View
296713 57959 CVE-2007-5934 26382  View
296714 57959 CVE-2007-5934 ADV-2007-3806  View
296715 57959 CVE-2007-5934 FEDORA-2007-3369  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55932 JVNDB-2007-004624 PEAR MDB2 の LOB 機能における MDB2 を使用される脆弱性 PEAR MDB2 の LOB 機能は、URL 文字列を格納するリクエストを、URL のコンテンツを取得して格納するリクエストとして解釈するため、MDB2 を使用される脆弱性が存在します。 CVE-2007-5934 29289 CVE-2007-5934 57959 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004624.html 2007-02-04 2012-09-25 View