CVE-2007-2534 - Vulnerability Details - OpenCVE

Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00653.

Exploitation poc

Automatable yes

Technical Impact total

Vendors	Products
Phphoo3	Phphoo3

Configuration 1 [-]

cpe:2.3:a:phphoo3:phphoo3:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/36180
http://securityreason.com/securityalert/2669
http://www.attrition.org/pipermail/vim/2007-May/001597.html
http://www.securityfocus.com/archive/1/467839/100/0/threaded
http://www.securityfocus.com/bid/23854

History

Wed, 25 Sep 2024 16:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-89
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-05-09T00:00:00

Updated: 2024-09-25T16:07:11.501Z

Reserved: 2007-05-08T00:00:00

Link: CVE-2007-2534

Vulnrichment

Updated: 2024-08-07T13:42:33.409Z

NVD

Status : Deferred

Published: 2007-05-09T00:19:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2534

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-05-06T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use"}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "23854", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23854"}, {"name": "20070508 false: phpHoo3 Login SQL injection", "tags": ["mailing-list", "x_refsource_VIM"], "url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html"}, {"name": "36180", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/36180"}, {"name": "2669", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2669"}, {"name": "20070506 phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded"}], "tags": ["disputed"], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2534", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "** DISPUTED ** Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "23854", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23854"}, {"name": "20070508 false: phpHoo3 Login SQL injection", "refsource": "VIM", "url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html"}, {"name": "36180", "refsource": "OSVDB", "url": "http://osvdb.org/36180"}, {"name": "2669", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2669"}, {"name": "20070506 phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:42:33.409Z"}, "title": "CVE Program Container", "references": [{"name": "23854", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23854"}, {"name": "20070508 false: phpHoo3 Login SQL injection", "tags": ["mailing-list", "x_refsource_VIM", "x_transferred"], "url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html"}, {"name": "36180", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/36180"}, {"name": "2669", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2669"}, {"name": "20070506 phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-89", "lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "affected": [{"vendor": "phphoo3", "product": "phphoo3", "cpes": ["cpe:2.3:a:phphoo3:phphoo3:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-25T16:06:00.375653Z", "id": "CVE-2007-2534", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T16:07:11.501Z"}}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2534", "datePublished": "2007-05-09T00:00:00", "dateReserved": "2007-05-08T00:00:00", "dateUpdated": "2024-09-25T16:07:11.501Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.securityfocus.com/bid/23854", "name": "23854", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"]}, {"url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html", "name": "20070508 false: phpHoo3 Login SQL injection", "tags": ["mailing-list", "x_refsource_VIM", "x_transferred"]}, {"url": "http://osvdb.org/36180", "name": "36180", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"]}, {"url": "http://securityreason.com/securityalert/2669", "name": "2669", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"]}, {"url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded", "name": "20070506 phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:42:33.409Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2007-2534", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-25T16:06:00.375653Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:phphoo3:phphoo3:*:*:*:*:*:*:*:*"], "vendor": "phphoo3", "product": "phphoo3", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-24T19:35:25.560Z"}}], "cna": {"tags": ["disputed"], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-05-06T00:00:00", "references": [{"url": "http://www.securityfocus.com/bid/23854", "name": "23854", "tags": ["vdb-entry", "x_refsource_BID"]}, {"url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html", "name": "20070508 false: phpHoo3 Login SQL injection", "tags": ["mailing-list", "x_refsource_VIM"]}, {"url": "http://osvdb.org/36180", "name": "36180", "tags": ["vdb-entry", "x_refsource_OSVDB"]}, {"url": "http://securityreason.com/securityalert/2669", "name": "2669", "tags": ["third-party-advisory", "x_refsource_SREASON"]}, {"url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded", "name": "20070506 phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2018-10-16T14:57:01"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "n/a"}]}, "product_name": "n/a"}]}, "vendor_name": "n/a"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/23854", "name": "23854", "refsource": "BID"}, {"url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html", "name": "20070508 false: phpHoo3 Login SQL injection", "refsource": "VIM"}, {"url": "http://osvdb.org/36180", "name": "36180", "refsource": "OSVDB"}, {"url": "http://securityreason.com/securityalert/2669", "name": "2669", "refsource": "SREASON"}, {"url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded", "name": "20070506 phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability", "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "** DISPUTED ** Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-2534", "STATE": "PUBLIC", "ASSIGNER": "cve@mitre.org"}}}}, "cveMetadata": {"cveId": "CVE-2007-2534", "state": "PUBLISHED", "dateUpdated": "2024-09-25T16:07:11.501Z", "dateReserved": "2007-05-08T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2007-05-09T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:phphoo3:phphoo3:*:*:*:*:*:*:*:*", "matchCriteriaId": "301E317B-7C2A-4B6E-9F15-8674E4BAA4B8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [{"sourceIdentifier": "cve@mitre.org", "tags": ["disputed"]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use"}, {"lang": "es", "value": "** IMPUGNADA ** M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en admin.php de phpHoo3 permiten a atacantes remotos ejecutar comandos SQL de su elecci\u00f3n a trav\u00e9s de los par\u00e1metros (1) ADMIN_USER (USER) y (2) ADMIN_PASS (PASS) durante una validaci\u00f3n de acceso al sistema. NOTA: CVE niega esta vulnerabilidad, puesto que ADMIN_USER/ADMIN_PASS se inicializan antes de ser usadas."}], "id": "CVE-2007-2534", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2007-05-09T00:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/36180"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2669"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/23854"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/36180"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2669"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.attrition.org/pipermail/vim/2007-May/001597.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/467839/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/23854"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-89"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}