OSVDB ID: 42631

Title: JBoss Seam org.jboss.seam.framework.Query Class getRenderedEjbql Method order Variable Arbitrary Arbitrary EJBQL Command Execution

Info

Disclosure

Oct 12, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CVE ID: 2007-6433 (see also: NVD)
Secunia Advisory ID: 28077
VUPEN Advisory: ADV-2007-4215
Vendor Specific News/Changelog Entry: http://jira.jboss.com/jira/browse/JBSEAM-2084
http://sourceforge.net/project/shownotes.php?release_id=549490&group_id=22866

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/42631