CVE

Id
34574  
CVE No.
CVE-2008-4457  
Status
Candidate  
Description
SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a stats_res cookie to index.php.  
Phase
Assigned (20081006)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
378709 34574 CVE-2008-4457 MILW0RM:6393  View
378710 34574 CVE-2008-4457 URL:http://www.milw0rm.com/exploits/6393  View
378711 34574 CVE-2008-4457 CONFIRM:http://www.memht.com/news_95_Important-fix-for-all-MemHT-Versions.html  View
378712 34574 CVE-2008-4457 BID:31045  View
378713 34574 CVE-2008-4457 URL:http://www.securityfocus.com/bid/31045  View
378714 34574 CVE-2008-4457 VUPEN:ADV-2008-2510  View
378715 34574 CVE-2008-4457 URL:http://www.vupen.com/english/advisories/2008/2510  View
378716 34574 CVE-2008-4457 SECUNIA:31751  View
378717 34574 CVE-2008-4457 URL:http://secunia.com/advisories/31751  View
378718 34574 CVE-2008-4457 SREASON:4288  View
378719 34574 CVE-2008-4457 URL:http://securityreason.com/securityalert/4288  View
378720 34574 CVE-2008-4457 XF:memhtportal-incstatistics-sql-injection(44930)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50969 JVNDB-2008-006279 Vastal I-Tech Dating Zone の advanced_search_results.php における SQL インジェクションの脆弱性 Vastal I-Tech Dating Zone の advanced_search_results.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-4461 34574 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006279.html  View