CVE-2007-0695

State: Published
Severity: Not scored
Published: Feb 3, 2007
Updated: Aug 7, 2024
Reserved: Feb 3, 2007

Description

Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escape_sqlData, implode_sql, and implode_sqlIn functions, but these are protection schemes, not the vulnerable functions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

flip-multiple-sql-injection(31902)vdb-entry
ADV-2007-0454vdb-entry
20070203 FLIP SQL injection clarificationmailing-list
33649vdb-entry
http://sourceforge.net/project/shownotes.php?release_id=481131&group_id=98260

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.