NVD

Id
58337  
Name
CVE-2007-6342  
Description
SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-12-13  
Modified Date
2009-04-01  
Seq
2007-6342  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299165 58337 CVE-2007-6342 http://search.cpan.org/src/DCASTRO/Apache-AuthCAS-0.5/Changes  View
299166 58337 CVE-2007-6342 3439  View
299167 58337 CVE-2007-6342 20071207 Potential SQL injection vulnerability in Apache::AuthCAS  View
299168 58337 CVE-2007-6342 20080323 Re: Potential SQL injection vulnerability in Apache::AuthCAS  View
299169 58337 CVE-2007-6342 26762  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54282 JVNDB-2007-002974 Apache HTTP Server の David Castro AuthCAS.pm における SQL インジェクションの脆弱性 Apache HTTP Server の David Castro AuthCAS モジュール (AuthCAS.pm) には、SQL インジェクションの脆弱性が存在します。 CVE-2007-6342 29697 CVE-2007-6342 58337 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002974.html 2007-12-13 2012-06-26 View