A vulnerability classified as critical was found in Redline Software LANAI CMS 1.2.14. The affected element is an unknown function of the file module.php. The manipulation of the argument gid results in sql injection.
This vulnerability is known as CVE-2007-4210. It is possible to launch the attack remotely. Furthermore, an exploit is available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2007-4210 | Redline Software LANAI CMS 1.2.14 module.php gid sql injection (EDB-4258 / XFDB-35786)
A vulnerability classified as critical was found in Redline Software LANAI CMS 1.2.14. The affected element is an unknown function of the file module.php. The…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referenceosvdb.org
-
Web Referenceosvdb.org
-
Web Referencewww.securityfocus.com
-
Web Referenceexchange.xforce.ibmcloud.com
-
Web Referenceosvdb.org