CVE-2007-3301

SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrary SQL commands via the errorcode parameter. NOTE: a patch may have been released privately between April and June 2007. NOTE: this issue may overlap CVE-2007-3273.
Configurations

Configuration 1

cpe:2.3:a:fusetalk:fusetalk:2.0:-:standard:*:*:*:*:*
cpe:2.3:a:fusetalk:fusetalk:2.0:-:coldfusion:*:*:*:*:*
cpe:2.3:a:fusetalk:fusetalk:2.0:-:basic:*:*:*:*:*
cpe:2.3:a:fusetalk:fusetalk:2.0:-:enterprise:*:*:*:*:*

Information

Published : 2007-06-20 10:30

Updated : 2018-10-16 04:48


NVD link : CVE-2007-3301

Mitre link : CVE-2007-3301

Products Affected
No products.
CWE