CVE

Id
36342  
CVE No.
CVE-2008-6225  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies [spread] out such false informations. Such scripts or versions [do not] exist."  
Phase
Assigned (20090220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
397599 36342 CVE-2008-6225 MILW0RM:7009  View
397600 36342 CVE-2008-6225 URL:http://www.milw0rm.com/exploits/7009  View
397601 36342 CVE-2008-6225 MISC:http://www.mole-group.com/content/view/57/72  View
397602 36342 CVE-2008-6225 BID:32138  View
397603 36342 CVE-2008-6225 URL:http://www.securityfocus.com/bid/32138  View
397604 36342 CVE-2008-6225 OSVDB:49694  View
397605 36342 CVE-2008-6225 URL:http://osvdb.org/49694  View
397606 36342 CVE-2008-6225 VUPEN:ADV-2008-3027  View
397607 36342 CVE-2008-6225 URL:http://www.vupen.com/english/advisories/2008/3027  View
397608 36342 CVE-2008-6225 SECUNIA:32577  View
397609 36342 CVE-2008-6225 URL:http://secunia.com/advisories/32577  View
397610 36342 CVE-2008-6225 XF:airlineticket-info-sql-injection(46383)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40584 JVNDB-2009-001590 Drupal 用モジュールの Drupal Content Construction Kit (CCK) の管理インターフェースにおける クロスサイトスクリプティングの脆弱性 Drupal 用モジュールの Drupal Content Construction Kit (CCK) の管理インターフェースには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6229 36342 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001590.html  View