CVE

Id
30990  
CVE No.
CVE-2008-0873  
Status
Candidate  
Description
SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action.  
Phase
Assigned (20080221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
329868 30990 CVE-2008-0873 BUGTRAQ:20080219 XOOPS Module classifieds SQL Injection(cid)  View
329869 30990 CVE-2008-0873 URL:http://www.securityfocus.com/archive/1/archive/1/488357/100/0/threaded  View
329870 30990 CVE-2008-0873 MILW0RM:5158  View
329871 30990 CVE-2008-0873 URL:http://www.milw0rm.com/exploits/5158  View
329872 30990 CVE-2008-0873 BID:27895  View
329873 30990 CVE-2008-0873 URL:http://www.securityfocus.com/bid/27895  View
329874 30990 CVE-2008-0873 SREASON:3681  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48827 JVNDB-2008-004137 Jinzora Media Jukebox におけるクロスサイトスクリプティングの脆弱性 Jinzora Media Jukebox には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0877 30990 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004137.html  View