CVE

Id
31467  
CVE No.
CVE-2008-1350  
Status
Candidate  
Description
SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrary SQL commands via the k parameter in an article action.  
Phase
Assigned (20080317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
336993 31467 CVE-2008-1350 BUGTRAQ:20080312 Powered by phpBB 2001, 2006 (SQL)  View
336994 31467 CVE-2008-1350 URL:http://www.securityfocus.com/archive/1/archive/1/489468/100/0/threaded  View
336995 31467 CVE-2008-1350 MILW0RM:5243  View
336996 31467 CVE-2008-1350 URL:http://www.milw0rm.com/exploits/5243  View
336997 31467 CVE-2008-1350 BID:28225  View
336998 31467 CVE-2008-1350 URL:http://www.securityfocus.com/bid/28225  View
336999 31467 CVE-2008-1350 SECUNIA:29339  View
337000 31467 CVE-2008-1350 URL:http://secunia.com/advisories/29339  View
337001 31467 CVE-2008-1350 SREASON:3745  View
337002 31467 CVE-2008-1350 URL:http://securityreason.com/securityalert/3745  View
337003 31467 CVE-2008-1350 XF:phpbb-kb-sql-injection(41192)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47545 JVNDB-2008-002855 Advanced Data Solutions VSO-XP の MyIssuesView.asp における SQL インジェクションの脆弱性 Advanced Data Solutions Virtual Support Office-XP (VSO-XP) の MyIssuesView.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1354 31467 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002855.html  View