CVE

Id
13679  
CVE No.
CVE-2005-2473  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, (8) DepositSlipID parameter to DepositSlipEditor.php, (9) QueryID parameter to QueryView.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php.  
Phase
Assigned (20050805)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
99515 13679 CVE-2005-2473 BUGTRAQ:20050801 ChurchInfo Multiple Vulnerabilities  View
99516 13679 CVE-2005-2473 URL:http://marc.info/?l=bugtraq&m=112291550713546&w=2  View
99517 13679 CVE-2005-2473 BID:14438  View
99518 13679 CVE-2005-2473 URL:http://www.securityfocus.com/bid/14438  View
99519 13679 CVE-2005-2473 OSVDB:18408  View
99520 13679 CVE-2005-2473 URL:http://www.osvdb.org/18408  View
99521 13679 CVE-2005-2473 OSVDB:18409  View
99522 13679 CVE-2005-2473 URL:http://www.osvdb.org/18409  View
99523 13679 CVE-2005-2473 OSVDB:18410  View
99524 13679 CVE-2005-2473 URL:http://www.osvdb.org/18410  View
99525 13679 CVE-2005-2473 OSVDB:18411  View
99526 13679 CVE-2005-2473 URL:http://www.osvdb.org/18411  View
99527 13679 CVE-2005-2473 OSVDB:18412  View
99528 13679 CVE-2005-2473 URL:http://www.osvdb.org/18412  View
99529 13679 CVE-2005-2473 OSVDB:18413  View
99530 13679 CVE-2005-2473 URL:http://www.osvdb.org/18413  View
99531 13679 CVE-2005-2473 OSVDB:18414  View
99532 13679 CVE-2005-2473 URL:http://www.osvdb.org/18414  View
99533 13679 CVE-2005-2473 OSVDB:18415  View
99534 13679 CVE-2005-2473 URL:http://www.osvdb.org/18415  View
99535 13679 CVE-2005-2473 OSVDB:18416  View
99536 13679 CVE-2005-2473 URL:http://www.osvdb.org/18416  View
99537 13679 CVE-2005-2473 OSVDB:18417  View
99538 13679 CVE-2005-2473 URL:http://www.osvdb.org/18417  View
99539 13679 CVE-2005-2473 OSVDB:18418  View
99540 13679 CVE-2005-2473 URL:http://www.osvdb.org/18418  View
99541 13679 CVE-2005-2473 OSVDB:18419  View
99542 13679 CVE-2005-2473 URL:http://www.osvdb.org/18419  View
99543 13679 CVE-2005-2473 OSVDB:18420  View
99544 13679 CVE-2005-2473 URL:http://www.osvdb.org/18420  View
99545 13679 CVE-2005-2473 OSVDB:18421  View
99546 13679 CVE-2005-2473 URL:http://www.osvdb.org/18421  View
99547 13679 CVE-2005-2473 OSVDB:18422  View
99548 13679 CVE-2005-2473 URL:http://www.osvdb.org/18422  View
99549 13679 CVE-2005-2473 OSVDB:18423  View
99550 13679 CVE-2005-2473 URL:http://www.osvdb.org/18423  View
99551 13679 CVE-2005-2473 OSVDB:18424  View
99552 13679 CVE-2005-2473 URL:http://www.osvdb.org/18424  View
99553 13679 CVE-2005-2473 OSVDB:18427  View
99554 13679 CVE-2005-2473 URL:http://www.osvdb.org/18427  View
99555 13679 CVE-2005-2473 OSVDB:18428  View
99556 13679 CVE-2005-2473 URL:http://www.osvdb.org/18428  View
99557 13679 CVE-2005-2473 SECTRACK:1014617  View
99558 13679 CVE-2005-2473 URL:http://securitytracker.com/id?1014617  View
99559 13679 CVE-2005-2473 SECUNIA:16292  View
99560 13679 CVE-2005-2473 URL:http://secunia.com/advisories/16292  View
99561 13679 CVE-2005-2473 XF:churchinfo-sql-injection(21647)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62634 JVNDB-2005-000874 UnZip のファイル解凍時におけるパーミッションの処理に競合状態の脆弱性 Info-ZIP が提供する UnZip には、ファイルの解凍時のパーミッションの処理に競合状態が発生する脆弱性により、リンク先のファイルのパーミッションを変更可能な問題があります。 CVE-2005-2475 13679 1.2 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000874.html  View