{
  "id": "CVE-2007-3539",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2007-07-03T20:30:00.000",
  "lastModified": "2017-09-29T01:29:03.173",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) t and (2) f parameters in (a) qti_ind_post.php and (b) qti_ind_post_prt.php; (3) dir and (4) order parameters in qti_ind_member.php; (5) id parameter in qti_usr.php; and the (6) f parameter in qti_ind_topic.php.  NOTE: it was later reported that vector 5 also affects 1.4, 1.5, and 1.5.0.3."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en QuickTicket versi\u00f3n 1.2 build:20070621 y QuickTalk Forum versi\u00f3n 1.3, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio de los par\u00e1metros (1) t y (2) f en los archivos (a) qti_ind_post.php y (b) qti_ind_post_prt.php; en los par\u00e1metros (3) dir y (4) order en el archivo qti_ind_member.php; el (5) par\u00e1metro id en el archivo  qti_usr.php; y el (6) par\u00e1metro f en el archivo  qti_ind_topic.php. NOTA: fue reportado m\u00e1s tarde que el vector 5 tambi\u00e9n afecta a las versiones 1.4, 1.5 y 1.5.0.3."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:qt-cute:quicktalk_forum:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "84C9BCEA-9079-474C-8FFB-76012B191F49"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:qt-cute:quicktalk_forum:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "550EEDBD-B3B3-487B-92E6-D53DC33D8BC7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:qt-cute:quicktalk_forum:1.5.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "164695C8-43A7-45E7-8B9C-14414D16732B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:qt-cute:quickticket:1.2_build_2007_06_21:*:*:*:*:*:*:*",
              "matchCriteriaId": "23ACFD7E-D043-4EF8-B4CE-FB29B4F75EF6"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://pridels-team.blogspot.com/2007/06/quickticket-multiple-sql-inj.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/28176",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2367",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35100",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41065",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/5222",
      "source": "cve@mitre.org"
    }
  ]
}