CVE-2007-3301 in FuseTalk

Resumen (Inglés)

SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrary SQL commands via the errorcode parameter. NOTE: a patch may have been released privately between April and June 2007. NOTE: this issue may overlap CVE-2007-3273.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2007-06-20

Divulgación

2007-06-20

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
37367	FuseTalk autherror.cfm inyección SQL	89	Prueba de concepto	No está definido	CVE-2007-3301

Fuentes

• MITRE
• NVD
• CVE Details