CVEvulnerability
CVE-2007-1231
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files.
Affected configurations
• sqlitemanager sqlitemanager 1.2.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/34634 osvdb.org
- http://securityreason.com/securityalert/2366 securityreason.com
- http://www.securityfocus.com/archive/1/461304/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22731 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32692 exchange.xforce.ibmcloud.com
- http://osvdb.org/34634 osvdb.org
- http://securityreason.com/securityalert/2366 securityreason.com
- http://www.securityfocus.com/archive/1/461304/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22731 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32692 exchange.xforce.ibmcloud.com