CVE

Id
31730  
CVE No.
CVE-2008-1613  
Status
Candidate  
Description
SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341146 31730 CVE-2008-1613 BUGTRAQ:20080421 IRM Security Advisory : RedDot CMS SQL injection vulnerability  View
341147 31730 CVE-2008-1613 URL:http://www.securityfocus.com/archive/1/archive/1/491139/100/0/threaded  View
341148 31730 CVE-2008-1613 MILW0RM:5482  View
341149 31730 CVE-2008-1613 URL:http://www.milw0rm.com/exploits/5482  View
341150 31730 CVE-2008-1613 MISC:http://www.irmplc.com/index.php/167-Advisory-026  View
341151 31730 CVE-2008-1613 BID:28872  View
341152 31730 CVE-2008-1613 URL:http://www.securityfocus.com/bid/28872  View
341153 31730 CVE-2008-1613 SECUNIA:29843  View
341154 31730 CVE-2008-1613 URL:http://secunia.com/advisories/29843  View
341155 31730 CVE-2008-1613 XF:reddot-iord-sql-injection(41924)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48977 JVNDB-2008-004287 WorkSite Web で使用される iManFile.cab におけるメモリ二重解放の脆弱性 WorkSite Web で使用される Web TransferCtrl Class (iManFile.cab) には、メモリを二重に解放する不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-1617 31730 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004287.html  View