CVEvulnerability
CVE-2007-6559
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via (1) the from parameter to index.php or (2) the page parameter to update.php.
Affected configurations
• logaholic logaholic 0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/39790 osvdb.org
- http://osvdb.org/39791 osvdb.org
- http://secunia.com/advisories/28263 secunia.com
- http://securityreason.com/securityalert/3496 securityreason.com
- http://www.securityfocus.com/archive/1/485480/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490101/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27003 Exploit
- http://osvdb.org/39790 osvdb.org
- http://osvdb.org/39791 osvdb.org
- http://secunia.com/advisories/28263 secunia.com
- http://securityreason.com/securityalert/3496 securityreason.com
- http://www.securityfocus.com/archive/1/485480/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490101/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27003 Exploit