Lucene search

[email protected]CVE-2007-0695

HistoryFeb 03, 2007 - 10:28 p.m.

CVE-2007-0695

2007-02-0322:28:00

CWE-89

[email protected]

web.nvd.nist.gov

cve

2007

0695

sql injection

free lan

flip

remote attackers

arbitrary sql commands

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.2%

JSON

Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escape_sqlData, implode_sql, and implode_sqlIn functions, but these are protection schemes, not the vulnerable functions.

Affected configurations

NVD

Node

free_lan_intra_internet_portalfree_lan_intra_internet_portalRange≤1.0_rc2

free_lan_intra_internet_portalfree_lan_intra_internet_portalMatch0.9.0.730

free_lan_intra_internet_portalfree_lan_intra_internet_portalMatch0.9.0.1029

free_lan_intra_internet_portalfree_lan_intra_internet_portalMatch1.0_rc1

CPENameOperatorVersion
free_lan_intra_internet_portal:free_lan_intra_internet_portalfree lan intra internet portalle1.0_rc2
free_lan_intra_internet_portal:free_lan_intra_internet_portalfree lan intra internet portaleq0.9.0.730
free_lan_intra_internet_portal:free_lan_intra_internet_portalfree lan intra internet portaleq0.9.0.1029
free_lan_intra_internet_portal:free_lan_intra_internet_portalfree lan intra internet portaleq1.0_rc1

CPE	Name	Operator	Version
free_lan_intra_internet_portal:free_lan_intra_internet_portal	free lan intra internet portal	le	1.0_rc2
free_lan_intra_internet_portal:free_lan_intra_internet_portal	free lan intra internet portal	eq	0.9.0.730
free_lan_intra_internet_portal:free_lan_intra_internet_portal	free lan intra internet portal	eq	0.9.0.1029
free_lan_intra_internet_portal:free_lan_intra_internet_portal	free lan intra internet portal	eq	1.0_rc1

References

osvdb.org/33649

sourceforge.net/project/shownotes.php?release_id=481131&group_id=98260

www.attrition.org/pipermail/vim/2007-February/001282.html

www.vupen.com/english/advisories/2007/0454

exchange.xforce.ibmcloud.com/vulnerabilities/31902

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for CVE-2007-0695

prion1 cvelist1 nvd1 securityvulns1