CVE

Id
34791  
CVE No.
CVE-2008-4674  
Status
Candidate  
Description
SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in browse mode.  
Phase
Assigned (20081021)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
380860 34791 CVE-2008-4674 MILW0RM:6599  View
380861 34791 CVE-2008-4674 URL:http://www.milw0rm.com/exploits/6599  View
380862 34791 CVE-2008-4674 BID:31443  View
380863 34791 CVE-2008-4674 URL:http://www.securityfocus.com/bid/31443  View
380864 34791 CVE-2008-4674 SECUNIA:32049  View
380865 34791 CVE-2008-4674 URL:http://secunia.com/advisories/32049  View
380866 34791 CVE-2008-4674 SREASON:4469  View
380867 34791 CVE-2008-4674 URL:http://securityreason.com/securityalert/4469  View
380868 34791 CVE-2008-4674 XF:realestatemanager-catid-sql-injection(45499)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46575 JVNDB-2008-001885 IBM WAS の HTTP Transport コンポーネントにおけるサービス運用妨害 (DoS) 状態の脆弱性 IBM WebSphere Application Server (WAS) の HTTP Transport コンポーネントにおける HTTP_Request_Parser メソッドには、HTTP Host ヘッダの処理に不備があるため、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2008-4678 34791 7.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001885.html  View