|
|
CVE Reference: CVE-2007-4956 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-4956 |
|
|
Description: Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav parameter to index.php in a browser aff action in the stats module. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/36635 http://xforce.iss.net/xforce/xfdb/36634 http://xforce.iss.net/xforce/xfdb/36636 SAID Secunia Advisory: SA26850 OSVDB 37180 37182 MISC http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=29 MILW0RM http://www.milw0rm.com/exploits/4414 http://www.milw0rm.com/exploits/4413 http://www.milw0rm.com/exploits/4412 BID 25679 |
|
| Return to the previous page. |
