CVE

Id
14442  
CVE No.
CVE-2005-3236  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php.  
Phase
Assigned (20051014)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
108500 14442 CVE-2005-3236 BUGTRAQ:20051008 Cyphor 0.19 SQL Injection / Board takeover / cross site scripting  View
108501 14442 CVE-2005-3236 URL:http://marc.info/?l=bugtraq&m=112879353805769&w=2  View
108502 14442 CVE-2005-3236 BID:15047  View
108503 14442 CVE-2005-3236 URL:http://www.securityfocus.com/bid/15047  View
108504 14442 CVE-2005-3236 OSVDB:19943  View
108505 14442 CVE-2005-3236 URL:http://www.osvdb.org/19943  View
108506 14442 CVE-2005-3236 OSVDB:19944  View
108507 14442 CVE-2005-3236 URL:http://www.osvdb.org/19944  View
108508 14442 CVE-2005-3236 OSVDB:19945  View
108509 14442 CVE-2005-3236 URL:http://www.osvdb.org/19945  View
108510 14442 CVE-2005-3236 SECTRACK:1015020  View
108511 14442 CVE-2005-3236 URL:http://securitytracker.com/id?1015020  View
108512 14442 CVE-2005-3236 SECUNIA:17104  View
108513 14442 CVE-2005-3236 URL:http://secunia.com/advisories/17104/  View
108514 14442 CVE-2005-3236 SREASON:70  View
108515 14442 CVE-2005-3236 URL:http://securityreason.com/securityalert/70  View
108516 14442 CVE-2005-3236 XF:cyphor-lostpwd-newmsg-sql-injection(22552)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62409 JVNDB-2005-000611 Sun Solaris の SCTP ソケットオプションの取り扱いにおけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris には、SCTP ソケットオプションの取り扱いに不備があり、システムがサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2005-3238 14442 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000611.html  View