CVE-2007-3909

Description

Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35406

http://www.securityfocus.com/bid/25094

http://www.portcullis-security.com/uplds/advisories/Bandersnatch%20-%2007-006.txt

http://www.osvdb.org/38268

http://secunia.com/advisories/26202

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3