CVE

Id
31756  
CVE No.
CVE-2008-1639  
Status
Candidate  
Description
SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/lib_article.include.php.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341427 31756 CVE-2008-1639 MILW0RM:5331  View
341428 31756 CVE-2008-1639 URL:http://www.milw0rm.com/exploits/5331  View
341429 31756 CVE-2008-1639 BID:28534  View
341430 31756 CVE-2008-1639 URL:http://www.securityfocus.com/bid/28534  View
341431 31756 CVE-2008-1639 VUPEN:ADV-2008-1053  View
341432 31756 CVE-2008-1639 URL:http://www.vupen.com/english/advisories/2008/1053/references  View
341433 31756 CVE-2008-1639 XF:neatweblog-index-sql-injection(41555)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48987 JVNDB-2008-004297 LDMS の PXEMTFTP.exe におけるディレクトリトラバーサルの脆弱性 LANDesk Management Suite (LDMS) の PXE TFTP Service (PXEMTFTP.exe) には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-1643 31756 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004297.html  View