CVE-2007-2339
Phorum 5.1.20 - 'admin.php' badwords/banlist Module SQL Injection
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
6Exploited in Wild
-Decision
Descriptions
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via (1) a modified recipients parameter name in (a) pm.php; (2) the curr parameter to the (b) badwords (aka censorlist) or (c) banlist module in admin.php; or (3) the "Edit groups / Add group" field in the (d) groups module in admin.php.
Múltiples vulnerabilidades de inyección SQL en Phorum anterior a 5.1.22 permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1)un nombre modificado del parámetro de los recipientes en (a) pm.php; (2) el parámetro curr en (b)badwords (también conocido como censorlist) o (c) móldulo banlist en admin.php; o (3) el campo "editar grupos / Añadir grupo" en el módulo (d) groups en admin.php.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-04-23 First Exploit
- 2007-04-27 CVE Reserved
- 2007-04-27 CVE Published
- 2024-07-31 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (15)
URL | Tag | Source |
---|---|---|
http://osvdb.org/35062 | Vdb Entry | |
http://osvdb.org/35063 | Vdb Entry | |
http://osvdb.org/35064 | Vdb Entry | |
http://securityreason.com/securityalert/2617 | Third Party Advisory | |
http://www.phorum.org/story.php?76 | X_refsource_confirm | |
http://www.securityfocus.com/archive/1/466286/100/0/threaded | Mailing List | |
http://www.vupen.com/english/advisories/2007/1479 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/34081 | Vdb Entry |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/29893 | 2007-04-23 | |
https://www.exploit-db.com/exploits/29894 | 2007-04-23 | |
https://www.exploit-db.com/exploits/29892 | 2007-04-23 | |
http://securitytracker.com/id?1017936 | 2024-08-07 | |
http://www.securityfocus.com/bid/23616 | 2024-08-07 | |
http://www.waraxe.us/advisory-49.html | 2024-08-07 |
URL | Date | SRC |
---|---|---|
http://secunia.com/advisories/24932 | 2018-10-16 |
URL | Date | SRC |
---|