CVEvulnerability
CVE-2007-3909
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors.
Affected configurations
• bandersnatch bandersnatch 0.4
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/26202 Vendor Advisory
- http://www.osvdb.org/38268 www.osvdb.org
- http://www.portcullis-security.com/uplds/advisories/Bandersnatch%20-%2007-006.txt www.portcullis-security.com
- http://www.securityfocus.com/bid/25094 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35406 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/26202 Vendor Advisory
- http://www.osvdb.org/38268 www.osvdb.org
- http://www.portcullis-security.com/uplds/advisories/Bandersnatch%20-%2007-006.txt www.portcullis-security.com
- http://www.securityfocus.com/bid/25094 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35406 exchange.xforce.ibmcloud.com