PT-2007-3945 · Unknown · Schoolboard

Ilker Kandemir + 1 · Publicado 2007-05-11 · Atualizado 2024-08-07 · CVE-2007-2626

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SchoolBoard (affected versions not specified)

Description The issue concerns a SQL injection vulnerability in the admin.php file of SchoolBoard. This vulnerability potentially allows remote attackers to execute arbitrary SQL commands. However, it's noted that the 'username' parameter does not exist, and the 'password' is not used in any queries, which disputes the vulnerability's impact.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-2626

Produtos afetados

Schoolboard

Referências · 7

• http://osvdb.org/36162 · Nota
• http://securityreason.com/securityalert/2695 · Nota
• https://t.me/cvenotify/89662 · Publicação no Telegram
• http://attrition.org/pipermail/vim/2007-May/001609.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2626 · Nota de Segurança
• http://securityfocus.com/archive/1/467486/100/0/threaded · Nota
• http://securityfocus.com/bid/23798 · Nota