CVE

Id
36858  
CVE No.
CVE-2008-6741  
Status
Candidate  
Description
SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the db_character_set parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" (backslash) sequence that does not quote the """ (single quote) character, as demonstrated via a manlabels action to index.php.  
Phase
Assigned (20090421)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401361 36858 CVE-2008-6741 MILW0RM:5826  View
401362 36858 CVE-2008-6741 URL:http://www.milw0rm.com/exploits/5826  View
401363 36858 CVE-2008-6741 BID:29734  View
401364 36858 CVE-2008-6741 URL:http://www.securityfocus.com/bid/29734  View
401365 36858 CVE-2008-6741 XF:smf-load-sql-injection(43118)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42002 JVNDB-2009-003009 BlogPHP の index.php における管理者権限を取得される脆弱性 BlogPHP の index.php には、管理者権限を取得される脆弱性が存在します。 CVE-2008-6745 36858 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003009.html  View