CVE

Id
33035  
CVE No.
CVE-2008-2918  
Status
Candidate  
Description
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3.  
Phase
Assigned (20080630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358523 33035 CVE-2008-2918 MILW0RM:5815  View
358524 33035 CVE-2008-2918 URL:http://www.milw0rm.com/exploits/5815  View
358525 33035 CVE-2008-2918 BID:29727  View
358526 33035 CVE-2008-2918 URL:http://www.securityfocus.com/bid/29727  View
358527 33035 CVE-2008-2918 SECUNIA:30677  View
358528 33035 CVE-2008-2918 URL:http://secunia.com/advisories/30677  View
358529 33035 CVE-2008-2918 XF:cartweaver-details-sql-injection(43099)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50632 JVNDB-2008-005942 artegic Dana IRC クライアントにおけるスタックベースのバッファオーバーフローの脆弱性 artegic Dana IRC クライアントには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-2922 33035 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005942.html  View