NVD

Id
58428  
Name
CVE-2007-6433  
Description
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-12-18  
Modified Date
2011-03-07  
Seq
2007-6433  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299821 58428 CVE-2007-6433 http://jira.jboss.com/jira/browse/JBSEAM-2084  View
299822 58428 CVE-2007-6433 http://sourceforge.net/project/shownotes.php?release_id=549490&group_id=22866  View
299823 58428 CVE-2007-6433 RHSA-2008:0151  View
299824 58428 CVE-2007-6433 RHSA-2008:0158  View
299825 58428 CVE-2007-6433 RHSA-2008:0213  View
299826 58428 CVE-2007-6433 26850  View
299827 58428 CVE-2007-6433 ADV-2007-4215  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56037 JVNDB-2007-004729 JBoss Seam の org.jboss.seam.framework.Query クラスにおける任意の EJBQL コマンドを実行される脆弱性 JBoss Seam の org.jboss.seam.framework.Query クラスの getRenderedEjbql メソッドには、任意の EJBQL コマンドを挿入および実行される脆弱性が存在します。 CVE-2007-6433 29788 CVE-2007-6433 58428 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004729.html 2007-12-18 2012-09-25 View