CVE

Id
33018  
CVE No.
CVE-2008-2901  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action.  
Phase
Assigned (20080630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358380 33018 CVE-2008-2901 MILW0RM:5811  View
358381 33018 CVE-2008-2901 URL:http://www.milw0rm.com/exploits/5811  View
358382 33018 CVE-2008-2901 BID:29722  View
358383 33018 CVE-2008-2901 URL:http://www.securityfocus.com/bid/29722  View
358384 33018 CVE-2008-2901 SECUNIA:30680  View
358385 33018 CVE-2008-2901 URL:http://secunia.com/advisories/30680  View
358386 33018 CVE-2008-2901 XF:familyconnections-multiple-sql-injection(43097)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49282 JVNDB-2008-004592 Mambo の Cache_Lite パッケージにおける PHP リモートファイルインクルージョンの脆弱性 Mambo の Cache_Lite パッケージの includes/Cache/Lite/Output.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-2905 33018 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004592.html  View