CVE

Id
37897  
CVE No.
CVE-2009-0462  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field) or (2) the txtPassword parameter (aka password field) to customer_login.asp. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411613 37897 CVE-2009-0462 MILW0RM:7953  View
411614 37897 CVE-2009-0462 URL:http://www.milw0rm.com/exploits/7953  View
411615 37897 CVE-2009-0462 BID:33575  View
411616 37897 CVE-2009-0462 URL:http://www.securityfocus.com/bid/33575  View
411617 37897 CVE-2009-0462 OSVDB:51718  View
411618 37897 CVE-2009-0462 URL:http://osvdb.org/51718  View
411619 37897 CVE-2009-0462 SECUNIA:33774  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44794 JVNDB-2009-005801 Vivvo CMS におけるクロスサイトスクリプティングの脆弱性 Vivvo CMS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0466 37897 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005801.html  View