CVE

Id
36626  
CVE No.
CVE-2008-6509  
Status
Candidate  
Description
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp.  
Phase
Assigned (20090323)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
399535 36626 CVE-2008-6509 BUGTRAQ:20081108 [AK-ADV2008-001] Openfire Jabber-Server: Multiple Vulnerabilities (Authentication Bypass, SQL injection, ...)  View
399536 36626 CVE-2008-6509 URL:http://www.securityfocus.com/archive/1/archive/1/498162/100/0/threaded  View
399537 36626 CVE-2008-6509 MILW0RM:7075  View
399538 36626 CVE-2008-6509 URL:http://www.milw0rm.com/exploits/7075  View
399539 36626 CVE-2008-6509 MISC:http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt  View
399540 36626 CVE-2008-6509 MISC:http://www.andreas-kurtz.de/archives/63  View
399541 36626 CVE-2008-6509 CONFIRM:http://www.igniterealtime.org/issues/browse/JM-1488  View
399542 36626 CVE-2008-6509 BID:32189  View
399543 36626 CVE-2008-6509 URL:http://www.securityfocus.com/bid/32189  View
399544 36626 CVE-2008-6509 OSVDB:51912  View
399545 36626 CVE-2008-6509 URL:http://osvdb.org/51912  View
399546 36626 CVE-2008-6509 SECUNIA:32478  View
399547 36626 CVE-2008-6509 URL:http://secunia.com/advisories/32478  View
399548 36626 CVE-2008-6509 VUPEN:ADV-2008-3061  View
399549 36626 CVE-2008-6509 URL:http://www.vupen.com/english/advisories/2008/3061  View
399550 36626 CVE-2008-6509 XF:openfire-siparklogsummary-sql-injection(46487)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41936 JVNDB-2009-002943 Andy"s PHP Knowledgebase の saa.php における任意のコードを実行される脆弱性 Andy"s PHP Knowledgebase の saa.php は、ファイルを無制限にアップロードする不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-6513 36626 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002943.html  View