CVE

Id
31986  
CVE No.
CVE-2008-1869  
Status
Candidate  
Description
SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: this issue might be site-specific.  
Phase
Assigned (20080417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345055 31986 CVE-2008-1869 MILW0RM:5383  View
345056 31986 CVE-2008-1869 URL:http://www.milw0rm.com/exploits/5383  View
345057 31986 CVE-2008-1869 BID:28644  View
345058 31986 CVE-2008-1869 URL:http://www.securityfocus.com/bid/28644  View
345059 31986 CVE-2008-1869 VUPEN:ADV-2008-1120  View
345060 31986 CVE-2008-1869 URL:http://www.vupen.com/english/advisories/2008/1120/references  View
345061 31986 CVE-2008-1869 SECUNIA:29705  View
345062 31986 CVE-2008-1869 URL:http://secunia.com/advisories/29705  View
345063 31986 CVE-2008-1869 XF:sitesiftlistings-index-sql-injection(41662)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50394 JVNDB-2008-005704 Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性 Nuke ET のプライベートメッセージ機能は、Internet Explorer が使用されている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1873 31986 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005704.html  View