Lucene search
+L

5 matches found

RedHat Linux
RedHat Linux
•added 2008/04/02 8:42 p.m.•14 views

EJBQL injection via 'order' parameter

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...

7.5CVSS6.1AI score0.03231EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2008/03/24 10:16 p.m.•14 views

EJBQL injection via 'order' parameter

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...

7.5CVSS6.1AI score0.03231EPSS
SaveExploits1References4
NVD
NVD
•added 2007/12/18 8:46 p.m.•38 views

CVE-2007-6433

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...

7.5CVSS7.4AI score0.03231EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2007/12/18 8:00 p.m.•40 views

CVE-2007-6433

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...

7.4AI score0.03231EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/18 12:00 a.m.•5 views

CVE-2007-6433: Improper Input Validation

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...

7.5CVSS6.3AI score0.03231EPSS
SaveExploits1References2
Rows per page
Query Builder