CVE-2007-6559 | BDVDB-2026-28423 Detail

Description#

Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via (1) the from parameter to index.php or (2) the page parameter to update.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/39791
http://secunia.com/advisories/28263
http://osvdb.org/39790
http://securityreason.com/securityalert/3496
http://www.securityfocus.com/bid/27003
http://www.securityfocus.com/archive/1/485480/100/0/threaded
http://www.securityfocus.com/archive/1/490101/100/0/threaded

Exploit#

No public exploit known

History#

Version 12007-12-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.