CVE-2007-4808

{"id": "CVE-2007-4808", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-09-11T18:17:00.000", "references": [{"url": "http://osvdb.org/37001", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/37002", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/37003", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/37004", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/37005", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/37006", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26752", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25602", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/29049", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/3137", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.z0rlu.ownspace.org/index.php?/archives/74-Powered-by-TLM-CMS-index.php-sql-inj..html", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36536", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42204", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/4376", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/37001", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/37002", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/37003", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/37004", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/37005", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/37006", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26752", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25602", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/29049", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/3137", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.z0rlu.ownspace.org/index.php?/archives/74-Powered-by-TLM-CMS-index.php-sql-inj..html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36536", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42204", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/4376", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php in a lirenews action, (2) the idnews parameter to goodies.php in a lire action, (3) the id parameter to file.php in a voir action, (4) the ID parameter to affichage.php, (5) the id_sal parameter to mod_forum/afficher.php, or (6) the id_sujet parameter to mod_forum/messages.php. NOTE: it was later reported that goodies.php and affichage.php scripts are reachable through index.php, and 1.1 is also affected. NOTE: it was later reported that the goodies.php vector also affects 3.1."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en TLM CMS versi\u00f3n 3.2, permiten a atacantes remotos ejecutar comandos SQL arbitrarios por medio de (1) el par\u00e1metro id en el archivo news.php en una acci\u00f3n lirenews, (2) el par\u00e1metro idnews en el archivo goodies.php en una acci\u00f3n lire, (3) el par\u00e1metro id en el archivo file.php en una acci\u00f3n voir, (4) el par\u00e1metro ID en el archivo affichage.php, (5) el par\u00e1metro id_sal en el archivo mod_forum/afficher.php, o (6) el par\u00e1metro id_sujet en el archivo mod_forum/messages.php . NOTA: m\u00e1s tarde se report\u00f3 que los scripts goodies.php y affichage.php son accesibles por medio del archivo index.php, y la versi\u00f3n 1.1 tambi\u00e9n est\u00e1 afectada. NOTA: m\u00e1s tarde se report\u00f3 que el vector goodies.php tambi\u00e9n afecta la versi\u00f3n 3.1."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tlm_cms:tlm_cms:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83FF3F9F-4E5A-47EB-80B5-C8A59A57D93C"}, {"criteria": "cpe:2.3:a:tlm_cms:tlm_cms:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "384EF97C-6D55-475F-BB57-2625B8C2BCBB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}