CVE

Id
37815  
CVE No.
CVE-2009-0380  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the bid parameter in a showbiz action to index.php, a different vector than CVE-2008-0607. NOTE: CVE disputes this issue, since neither "showbiz" nor "bid" appears in the source code for SOBI2.  
Phase
Assigned (20090202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
410945 37815 CVE-2009-0380 MILW0RM:7841  View
410946 37815 CVE-2009-0380 URL:http://www.milw0rm.com/exploits/7841  View
410947 37815 CVE-2009-0380 VIM:20090130 SOBI2 showbiz SQL injection - false, or site-specific  View
410948 37815 CVE-2009-0380 URL:http://www.attrition.org/pipermail/vim/2009-January/002136.html  View
410949 37815 CVE-2009-0380 BID:33378  View
410950 37815 CVE-2009-0380 URL:http://www.securityfocus.com/bid/33378  View
410951 37815 CVE-2009-0380 XF:sobi2-bid-sql-injection(48131)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42203 JVNDB-2009-003210 OwnRS CMS の autor.php における SQL インジェクションの脆弱性 OwnRS CMS の autor.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0384 37815 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003210.html  View