CVE-2007-1493 | BDVDB-2026-22956 Detail

Description#

nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://attrition.org/pipermail/vim/2007-March/001429.html
http://securityreason.com/securityalert/2430
http://www.securityfocus.com/archive/1/462453/100/0/threaded

Exploit#

No public exploit known

History#

Version 12007-03-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.