CVE

Id
36866  
CVE No.
CVE-2008-6749  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) checkuser and (2) checkpass parameters.  
Phase
Assigned (20090424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401424 36866 CVE-2008-6749 MILW0RM:7614  View
401425 36866 CVE-2008-6749 URL:http://www.milw0rm.com/exploits/7614  View
401426 36866 CVE-2008-6749 OSVDB:51302  View
401427 36866 CVE-2008-6749 URL:http://osvdb.org/51302  View
401428 36866 CVE-2008-6749 SECUNIA:33353  View
401429 36866 CVE-2008-6749 URL:http://secunia.com/advisories/33353  View
401430 36866 CVE-2008-6749 XF:flexphpdirectory-index-sql-injection(47640)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51322 JVNDB-2008-006632 SilverStripe における SQL インジェクションの脆弱性 SilverStripe は、AjaxUniqueTextField に関する処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2008-6753 36866 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006632.html  View