Back to search
CVE-2007-4810
Published: Sep 11, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple SQL injection vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to execute arbitrary SQL commands via (1) the ge_id parameter in a list.artists action to explore.php or (2) the id parameter in a show.tracks action to xml.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
25600
vdb-entry
x_refsource_BID
38834
vdb-entry
x_refsource_OSVDB
20070908 Netjuke 1.0-rc2 - sql injection & XSS
mailing-list
x_refsource_BUGTRAQ
3110
third-party-advisory
x_refsource_SREASON
netjuke-explore-xml-sql-injection(36516)
vdb-entry
x_refsource_XF
38833
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now