CVE

Id
37893  
CVE No.
CVE-2009-0458  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field). NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411585 37893 CVE-2009-0458 MILW0RM:7940  View
411586 37893 CVE-2009-0458 URL:http://milw0rm.com/exploits/7940  View
411587 37893 CVE-2009-0458 BID:33564  View
411588 37893 CVE-2009-0458 URL:http://www.securityfocus.com/bid/33564  View
411589 37893 CVE-2009-0458 OSVDB:51733  View
411590 37893 CVE-2009-0458 URL:http://osvdb.org/51733  View
411591 37893 CVE-2009-0458 SECUNIA:33777  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42227 JVNDB-2009-003234 ClickTech ClickCart の customer_login_check.asp における SQL インジェクションの脆弱性 ClickTech ClickCart の customer_login_check.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0462 37893 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003234.html  View