NVD

Id
6771  
Name
CVE-2008-7040  
Description
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-08-24  
Modified Date
2009-08-24  
Seq
2008-7040  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38670 6771 CVE-2008-7040 20080216 WordPress SQL Injection(wp-content-simple-forum)  View
38671 6771 CVE-2008-7040 27854  View
38672 6771 CVE-2008-7040 simpleforum-sfprofile-sql-injection(41578)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44662 JVNDB-2009-005669 Wordpress 用の Yellow Swordfish Simple Forum モジュールにおける SQL インジェクションの脆弱性 Wordpress 用の Yellow Swordfish Simple Forum モジュールの ahah/sf-profile.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-7040 37153 CVE-2008-7040 6771 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005669.html 2009-08-24 2012-12-20 View