CVE

Id
31991  
CVE No.
CVE-2008-1874  
Status
Candidate  
Description
SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users to execute arbitrary SQL commands via the reed parameter.  
Phase
Assigned (20080417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345096 31991 CVE-2008-1874 MILW0RM:5358  View
345097 31991 CVE-2008-1874 URL:http://www.milw0rm.com/exploits/5358  View
345098 31991 CVE-2008-1874 BID:28618  View
345099 31991 CVE-2008-1874 URL:http://www.securityfocus.com/bid/28618  View
345100 31991 CVE-2008-1874 SECUNIA:29700  View
345101 31991 CVE-2008-1874 URL:http://secunia.com/advisories/29700  View
345102 31991 CVE-2008-1874 XF:xpoze-mail-sql-injection(41656)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50398 JVNDB-2008-005708 xine-lib の src/demuxers/demux_nsf.c におけるスタックベースのバッファオーバーフローの脆弱性 xine-lib の src/demuxers/demux_nsf.c の demux_nsf_send_chunk 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-1878 31991 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005708.html  View