CVE

Id
32252  
CVE No.
CVE-2008-2135  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) contentname parameter to showdetails.php and the (2) article parameter to printer.php.  
Phase
Assigned (20080509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
348303 32252 CVE-2008-2135 BUGTRAQ:20080508 ezContents CMS Version 2.0.0 SQL Injection Vulnerabilities  View
348304 32252 CVE-2008-2135 URL:http://www.securityfocus.com/archive/1/archive/1/491813/100/0/threaded  View
348305 32252 CVE-2008-2135 MILW0RM:5559  View
348306 32252 CVE-2008-2135 URL:http://www.milw0rm.com/exploits/5559  View
348307 32252 CVE-2008-2135 BID:29098  View
348308 32252 CVE-2008-2135 URL:http://www.securityfocus.com/bid/29098  View
348309 32252 CVE-2008-2135 SREASON:3865  View
348310 32252 CVE-2008-2135 URL:http://securityreason.com/securityalert/3865  View
348311 32252 CVE-2008-2135 XF:ezcontents-showdetails-sql-injection(42260)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50460 JVNDB-2008-005770 rPath Appliance Platform Agent の rootpw プラグインにおける権限を取得される脆弱性 rPath Appliance Platform Agent の rootpw プラグインは、パスワード変更のリクエストを含む有効な管理者セッションを伴うブラウザからのリクエストを再検証しないため、権限を取得される、管理者アカウントの制御を維持される脆弱性が存在します。 CVE-2008-2139 32252 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005770.html  View