CVE

Id
30967  
CVE No.
CVE-2008-0850  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to whoisonline.php, (2) tracking_list_coaches_column parameter to main/mySpace/index.php, (3) tutor_name parameter to main/create_course/add_course.php, the (4) Referer HTTP header to index.php, and the (5) X-Fowarded-For HTTP header to main/admin/class_list.php.  
Phase
Assigned (20080220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
329690 30967 CVE-2008-0850 BUGTRAQ:20080219 [DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4  View
329691 30967 CVE-2008-0850 URL:http://www.securityfocus.com/archive/1/archive/1/488314/100/0/threaded  View
329692 30967 CVE-2008-0850 CONFIRM:http://projects.dokeos.com/index.php?do=details&task_id=2218  View
329693 30967 CVE-2008-0850 BID:27792  View
329694 30967 CVE-2008-0850 URL:http://www.securityfocus.com/bid/27792  View
329695 30967 CVE-2008-0850 VUPEN:ADV-2008-0587  View
329696 30967 CVE-2008-0850 URL:http://www.vupen.com/english/advisories/2008/0587  View
329697 30967 CVE-2008-0850 SECTRACK:1019425  View
329698 30967 CVE-2008-0850 URL:http://www.securitytracker.com/id?1019425  View
329699 30967 CVE-2008-0850 SECUNIA:28974  View
329700 30967 CVE-2008-0850 URL:http://secunia.com/advisories/28974  View
329701 30967 CVE-2008-0850 SREASON:3687  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48820 JVNDB-2008-004130 Joomla! および Mambo 用の com_salesrep コンポーネントにおける SQL インジェクションの脆弱性 Joomla! および Mambo 用の com_salesrep コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2008-0854 30967 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004130.html  View