CVE-2007-6342 SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (sessio...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| david castro apache authcas | = 0.4 | No fix listed |
References
- search.cpan.org
- 29492 third-party-advisory
- 3439 third-party-advisory
- 20071207 Potential SQL injection vulnerability in Apache::AuthCAS mailing-list
- 20080323 Re: Potential SQL injection vulnerability in Apache::AuthCAS mailing-list
- 26762 vdb-entry