CVE

Id
34274  
CVE No.
CVE-2008-4157  
Status
Candidate  
Description
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected.  
Phase
Assigned (20080922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375339 34274 CVE-2008-4157 EXPLOIT-DB:27519  View
375340 34274 CVE-2008-4157 URL:http://www.exploit-db.com/exploits/27519  View
375341 34274 CVE-2008-4157 FULLDISC:20150310 Vastal I-tech phpVID 1.2.3 SQL Injection Security Vulnerabilities  View
375342 34274 CVE-2008-4157 URL:http://seclists.org/fulldisclosure/2015/Mar/58  View
375343 34274 CVE-2008-4157 MILW0RM:6422  View
375344 34274 CVE-2008-4157 URL:http://www.milw0rm.com/exploits/6422  View
375345 34274 CVE-2008-4157 MISC:http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html  View
375346 34274 CVE-2008-4157 MISC:http://packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Injection.html  View
375347 34274 CVE-2008-4157 MISC:http://tetraph.com/security/sql-injection-vulnerability/vastal-i-tech-phpvid-1-2-3-sql-injection-security-vulnerabilities/  View
375348 34274 CVE-2008-4157 BID:31108  View
375349 34274 CVE-2008-4157 URL:http://www.securityfocus.com/bid/31108  View
375350 34274 CVE-2008-4157 OSVDB:48018  View
375351 34274 CVE-2008-4157 URL:http://osvdb.org/show/osvdb/48018  View
375352 34274 CVE-2008-4157 SECUNIA:31761  View
375353 34274 CVE-2008-4157 URL:http://secunia.com/advisories/31761  View
375354 34274 CVE-2008-4157 SREASON:4291  View
375355 34274 CVE-2008-4157 URL:http://securityreason.com/securityalert/4291  View
375356 34274 CVE-2008-4157 VUPEN:ADV-2008-2552  View
375357 34274 CVE-2008-4157 URL:http://www.vupen.com/english/advisories/2008/2552  View
375358 34274 CVE-2008-4157 XF:phpvid-groups-sql-injection(45028)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48143 JVNDB-2008-003453 Assetman の search_inv.php における SQL インジェクションの脆弱性 Assetman の search_inv.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-4161 34274 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003453.html  View