CVE

Id
10748  
CVE No.
CVE-2004-2322  
Status
Candidate  
Description
SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter to the announce module.  
Phase
Assigned (20050816)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
74933 10748 CVE-2004-2322 MISC:http://www.systemsecure.org/advisories/ssadvisory13022004.php  View
74934 10748 CVE-2004-2322 MISC:http://www.zone-h.com/advisories/read/id=3955  View
74935 10748 CVE-2004-2322 CONFIRM:http://sourceforge.net/tracker/index.php?func=detail&aid=892174&group_id=15539&atid=115539  View
74936 10748 CVE-2004-2322 OSVDB:3852  View
74937 10748 CVE-2004-2322 URL:http://www.osvdb.org/3852  View
74938 10748 CVE-2004-2322 SECTRACK:1009045  View
74939 10748 CVE-2004-2322 URL:http://www.securitytracker.com/alerts/2004/Feb/1009045.html  View
74940 10748 CVE-2004-2322 SECUNIA:10878  View
74941 10748 CVE-2004-2322 URL:http://secunia.com/advisories/10878/  View
74942 10748 CVE-2004-2322 XF:phpwebsite-announce-sql-injection(15219)  View

Related JVN