CVE

Id
36166  
CVE No.
CVE-2008-6049  
Status
Candidate  
Description
** REJECT ** SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter. NOTE: CVE and multiple reliable third parties dispute this issue, since TinyMCE does not contain index.php or any PHP code. This may be an issue in a product that has integrated TinyMCE.  
Phase
Assigned (20090204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
396425 36166 CVE-2008-6049 MILW0RM:7506  View
396426 36166 CVE-2008-6049 URL:http://www.milw0rm.com/exploits/7506  View
396427 36166 CVE-2008-6049 MLIST:[oss-security] 20090208 CVE-2008-6049 is bogus  View
396428 36166 CVE-2008-6049 URL:http://www.openwall.com/lists/oss-security/2009/02/08/1  View
396429 36166 CVE-2008-6049 VIM:20090317 false? CVE-2008-6049 / TinyMCE SQL injection  View
396430 36166 CVE-2008-6049 URL:http://www.attrition.org/pipermail/vim/2009-March/002159.html  View
396431 36166 CVE-2008-6049 BID:32899  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44353 JVNDB-2009-005360 PreProjects Pre Resume Submitter におけるパスワードを取得される脆弱性 PreProjects Pre Resume Submitter は、不十分なアクセスコントロールで Web ルート配下に onlineresume.mdb を格納するため、パスワードを取得される脆弱性が存在します。 CVE-2008-6053 36166 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005360.html  View