Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-6515 Details

support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://osvdb.org/39875	CVE
http://secunia.com/advisories/28182	CVE	Vendor Advisory
http://securityreason.com/securityalert/3480	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/39182	CVE
http://www.exploit-db.com/exploits/15987	CVE
http://www.securityfocus.com/archive/1/485398/100/0/threaded	CVE
http://www.securityfocus.com/bid/26963	CVE	ExploitPatch
http://osvdb.org/39875	[email protected]
http://secunia.com/advisories/28182	[email protected]	Vendor Advisory
http://securityreason.com/securityalert/3480	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/39182	[email protected]
http://www.exploit-db.com/exploits/15987	[email protected]
http://www.securityfocus.com/archive/1/485398/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/26963	[email protected]	ExploitPatch

CWE-ID	CWE Name	Source
CWE-94	Improper Control of Generation of Code ('Code Injection')	[email protected]

Product	Versions
sitescape sitescape forum st	All versions
CPE cpe:2.3:a:sitescape:sitescape_forum_st:::::::: Remediation No remediation found in references.
sitescape sitescape forum zx	All versions
CPE cpe:2.3:a:sitescape:sitescape_forum_zx:::::::: Remediation No remediation found in references.

7 change records found show changes

QUICK INFO