CVE

Id
34540  
CVE No.
CVE-2008-4423  
Status
Candidate  
Description
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action.  
Phase
Assigned (20081003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
378398 34540 CVE-2008-4423 BUGTRAQ:20080810 Ovidentia Sql Injection  View
378399 34540 CVE-2008-4423 URL:http://www.securityfocus.com/archive/1/archive/1/495313/100/0/threaded  View
378400 34540 CVE-2008-4423 MILW0RM:6232  View
378401 34540 CVE-2008-4423 URL:http://www.milw0rm.com/exploits/6232  View
378402 34540 CVE-2008-4423 BID:30645  View
378403 34540 CVE-2008-4423 URL:http://www.securityfocus.com/bid/30645  View
378404 34540 CVE-2008-4423 SECTRACK:1020650  View
378405 34540 CVE-2008-4423 URL:http://www.securitytracker.com/id?1020650  View
378406 34540 CVE-2008-4423 SECUNIA:31425  View
378407 34540 CVE-2008-4423 URL:http://secunia.com/advisories/31425  View
378408 34540 CVE-2008-4423 SREASON:4350  View
378409 34540 CVE-2008-4423 URL:http://securityreason.com/securityalert/4350  View
378410 34540 CVE-2008-4423 XF:ovidentia-index-sql-injection(44380)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49611 JVNDB-2008-004921 pPIM の changepassword.php における任意のパスワードを変更される脆弱性 Phlatline"s Personal Information Manager (pPIM) の changepassword.php は、管理者の認証を必要としないため、任意のパスワードを変更される脆弱性が存在します。 CVE-2008-4427 34540 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004921.html  View