CVE-2007-1786

Sažetak

SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Reference

http://osvdb.org/34544
http://secunia.com/advisories/24693
http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html
http://www.securityfocus.com/bid/23208
http://www.vupen.com/english/advisories/2007/1168
https://exchange.xforce.ibmcloud.com/vulnerabilities/33348

CVSS

Base:	6.8
Impact:	6.4
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

29-07-2017 - 01:30

Objavljeno

31-03-2007 - 10:19