CVE

Id
34818  
CVE No.
CVE-2008-4701  
Status
Candidate  
Description
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_user cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381356 34818 CVE-2008-4701 BID:31102  View
381357 34818 CVE-2008-4701 URL:http://www.securityfocus.com/bid/31102  View
381358 34818 CVE-2008-4701 SECUNIA:31811  View
381359 34818 CVE-2008-4701 URL:http://secunia.com/advisories/31811  View
381360 34818 CVE-2008-4701 XF:libera-admin-sql-injection(45011)  View
381361 34818 CVE-2008-4701 URL:http://xforce.iss.net/xforce/xfdb/45011  View
381362 34818 CVE-2008-4701 XF:libera-adminphp-sql-injection(46071)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51043 JVNDB-2008-006353 php Online Dating Software MyPHPDating の success_story.php における SQL インジェクションの脆弱性 php Online Dating Software MyPHPDating の success_story.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-4705 34818 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006353.html  View