CVE

Id
32787  
CVE No.
CVE-2008-2670  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. NOTE: the current_subsection parameter is already covered by CVE-2007-3889.  
Phase
Assigned (20080611)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354947 32787 CVE-2008-2670 BUGTRAQ:20080610 [web-app] Insanely Simple Blog 0.5 (index) Remote SQL Injection Vulnerabilities  View
354948 32787 CVE-2008-2670 URL:http://www.securityfocus.com/archive/1/archive/1/493224/100/0/threaded  View
354949 32787 CVE-2008-2670 MILW0RM:5774  View
354950 32787 CVE-2008-2670 URL:http://www.milw0rm.com/exploits/5774  View
354951 32787 CVE-2008-2670 MISC:http://chroot.org/exploits/chroot_uu_010  View
354952 32787 CVE-2008-2670 BID:29630  View
354953 32787 CVE-2008-2670 URL:http://www.securityfocus.com/bid/29630  View
354954 32787 CVE-2008-2670 SREASON:3938  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46266 JVNDB-2008-001576 Fujitsu Interstage Application Server の Interstage 管理コンソールにおける任意のファイル読込/削除の脆弱性 Fujitsu Interstage Application Server で使用されている Interstage 管理コンソールには、任意のファイルを読み取られる、または削除される脆弱性が存在します。 CVE-2008-2674 32787 6.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001576.html  View