CVE

Id
33529  
CVE No.
CVE-2008-3412  
Status
Candidate  
Description
SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a (1) pro_show or (2) disppro action to the default URI.  
Phase
Assigned (20080731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365042 33529 CVE-2008-3412 MILW0RM:6139  View
365043 33529 CVE-2008-3412 URL:http://www.milw0rm.com/exploits/6139  View
365044 33529 CVE-2008-3412 BID:30387  View
365045 33529 CVE-2008-3412 URL:http://www.securityfocus.com/bid/30387  View
365046 33529 CVE-2008-3412 SREASON:4090  View
365047 33529 CVE-2008-3412 URL:http://securityreason.com/securityalert/4090  View
365048 33529 CVE-2008-3412 XF:epshop-pid-sql-injection(44025)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49392 JVNDB-2008-004702 IceBB の modules/members.php における SQL インジェクションの脆弱性 IceBB の modules/members.php は、includes/functions.php 内の clean_string 関数内に間違った保護メカニズムがあるため、SQL インジェクションの脆弱性が存在します。 CVE-2008-3416 33529 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004702.html  View