CVE

Id
32528  
CVE No.
CVE-2008-2411  
Status
Candidate  
Description
SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action.  
Phase
Assigned (20080522)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
352173 32528 CVE-2008-2411 BUGTRAQ:20080509 SazCart <= 1.5.1 (prodid) Remote SQL Injection Exploit  View
352174 32528 CVE-2008-2411 URL:http://www.securityfocus.com/archive/1/archive/1/491892/100/0/threaded  View
352175 32528 CVE-2008-2411 MILW0RM:5576  View
352176 32528 CVE-2008-2411 URL:http://www.milw0rm.com/exploits/5576  View
352177 32528 CVE-2008-2411 BID:29129  View
352178 32528 CVE-2008-2411 URL:http://www.securityfocus.com/bid/29129  View
352179 32528 CVE-2008-2411 SECUNIA:30148  View
352180 32528 CVE-2008-2411 URL:http://secunia.com/advisories/30148  View
352181 32528 CVE-2008-2411 SREASON:3900  View
352182 32528 CVE-2008-2411 URL:http://securityreason.com/securityalert/3900  View
352183 32528 CVE-2008-2411 XF:sazcart-prodid-sql-injection(42542)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47788 JVNDB-2008-003098 DigitalHive の template/purpletech/base_include.php におけるディレクトリトラバーサルの脆弱性 DigitalHive の template/purpletech/base_include.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2415 32528 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003098.html  View