Beveiligingsadvies

CVE-2007-6127

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-11-26 22:00:00

Laatst bijgewerkt 2024-08-07 15:54:26

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to (1) view.page.inc.php, which is reachable through a view action to index.php; or (2) the year parameter to news.page.inc.php, which is reachable through a news action to index.php.

← Alle CVE's bekijken Bekijk op cve.org ↗