CVE

Id
30974  
CVE No.
CVE-2008-0857  
Status
Candidate  
Description
SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page.  
Phase
Assigned (20080220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
329744 30974 CVE-2008-0857 BUGTRAQ:20080219 WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability  View
329745 30974 CVE-2008-0857 URL:http://www.securityfocus.com/archive/1/archive/1/488345/100/0/threaded  View
329746 30974 CVE-2008-0857 MILW0RM:5164  View
329747 30974 CVE-2008-0857 URL:http://www.milw0rm.com/exploits/5164  View
329748 30974 CVE-2008-0857 BID:27885  View
329749 30974 CVE-2008-0857 URL:http://www.securityfocus.com/bid/27885  View
329750 30974 CVE-2008-0857 SECUNIA:29020  View
329751 30974 CVE-2008-0857 URL:http://secunia.com/advisories/29020  View
329752 30974 CVE-2008-0857 SREASON:3680  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48824 JVNDB-2008-004134 IBM Lotus Quickplace の leg/Main.nsf におけるクロスサイトスクリプティングの脆弱性 IBM Lotus Quickplace の leg/Main.nsf には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0861 30974 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004134.html  View