CVE

Id
35317  
CVE No.
CVE-2008-5200  
Status
Candidate  
Description
SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.  
Phase
Assigned (20081121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
387127 35317 CVE-2008-5200 MILW0RM:5966  View
387128 35317 CVE-2008-5200 URL:http://www.milw0rm.com/exploits/5966  View
387129 35317 CVE-2008-5200 BID:30006  View
387130 35317 CVE-2008-5200 URL:http://www.securityfocus.com/bid/30006  View
387131 35317 CVE-2008-5200 VUPEN:ADV-2008-1974  View
387132 35317 CVE-2008-5200 URL:http://www.vupen.com/english/advisories/2008/1974/references  View
387133 35317 CVE-2008-5200 SREASON:4643  View
387134 35317 CVE-2008-5200 URL:http://securityreason.com/securityalert/4643  View
387135 35317 CVE-2008-5200 XF:xewebtv-index-sql-injection(43469)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51159 JVNDB-2008-006469 PowerAward におけるディレクトリトラバーサルの脆弱性 PowerAward には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-5204 35317 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006469.html  View