CVE

Id
15436  
CVE No.
CVE-2005-4232  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection.  
Phase
Assigned (20051214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
120976 15436 CVE-2005-4232 MISC:http://pridels0.blogspot.com/2005/12/jamit-job-board-24x-sql-inj.html  View
120977 15436 CVE-2005-4232 VIM:20060814 vendor dispute: 21687: Jamit Job Board index.php cat Variable SQL Injection (fwd)  View
120978 15436 CVE-2005-4232 URL:http://www.attrition.org/pipermail/vim/2006-August/000972.html  View
120979 15436 CVE-2005-4232 BID:15848  View
120980 15436 CVE-2005-4232 URL:http://www.securityfocus.com/bid/15848  View
120981 15436 CVE-2005-4232 VUPEN:ADV-2005-2879  View
120982 15436 CVE-2005-4232 URL:http://www.vupen.com/english/advisories/2005/2879  View
120983 15436 CVE-2005-4232 OSVDB:21687  View
120984 15436 CVE-2005-4232 URL:http://www.osvdb.org/21687  View
120985 15436 CVE-2005-4232 SECUNIA:18007  View

Related JVN