CVE

Id
14414  
CVE No.
CVE-2005-3208  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execute arbitrary SQL code via (a) the password parameter in control.asp, and (b) the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages.  
Phase
Assigned (20051014)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
108422 14414 CVE-2005-3208 BUGTRAQ:20051007 Aenovo Multiple Vulnerabilities  View
108423 14414 CVE-2005-3208 URL:http://marc.info/?l=bugtraq&m=112872593432359&w=2  View
108424 14414 CVE-2005-3208 MISC:http://www.kapda.ir/advisory-78.html  View
108425 14414 CVE-2005-3208 BID:15036  View
108426 14414 CVE-2005-3208 URL:http://www.securityfocus.com/bid/15036  View
108427 14414 CVE-2005-3208 BID:15038  View
108428 14414 CVE-2005-3208 URL:http://www.securityfocus.com/bid/15038  View
108429 14414 CVE-2005-3208 OSVDB:19936  View
108430 14414 CVE-2005-3208 URL:http://www.osvdb.org/19936  View
108431 14414 CVE-2005-3208 OSVDB:19937  View
108432 14414 CVE-2005-3208 URL:http://www.osvdb.org/19937  View
108433 14414 CVE-2005-3208 SECUNIA:17117  View
108434 14414 CVE-2005-3208 URL:http://secunia.com/advisories/17117/  View
108435 14414 CVE-2005-3208 XF:aenovo-password-sql-injection(22547)  View
108436 14414 CVE-2005-3208 URL:http://xforce.iss.net/xforce/xfdb/22547  View
108437 14414 CVE-2005-3208 XF:aenovo-strsql-sql-injection(22551)  View
108438 14414 CVE-2005-3208 URL:http://xforce.iss.net/xforce/xfdb/22551  View
108439 14414 CVE-2005-3208 XF:aenovo-xss(22553)  View

Related JVN