CVE

Id
38165  
CVE No.
CVE-2009-0730  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726.  
Phase
Assigned (20090224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
415180 38165 CVE-2009-0730 BUGTRAQ:20090221 gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection  View
415181 38165 CVE-2009-0730 URL:http://www.securityfocus.com/archive/1/archive/1/501176/100/0/threaded  View
415182 38165 CVE-2009-0730 BUGTRAQ:20090221 gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection  View
415183 38165 CVE-2009-0730 URL:http://www.securityfocus.com/archive/1/archive/1/501175/100/0/threaded  View
415184 38165 CVE-2009-0730 BUGTRAQ:20090221 gigCalendar Joomla Component 1.0 SQL Injection  View
415185 38165 CVE-2009-0730 URL:http://www.securityfocus.com/archive/1/archive/1/501174/100/0/threaded  View
415186 38165 CVE-2009-0730 BID:33859  View
415187 38165 CVE-2009-0730 URL:http://www.securityfocus.com/bid/33859  View
415188 38165 CVE-2009-0730 BID:33863  View
415189 38165 CVE-2009-0730 URL:http://www.securityfocus.com/bid/33863  View
415190 38165 CVE-2009-0730 XF:gigcalendar-venuedetails-sql-injection(48865)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43494 JVNDB-2009-004501 Nokia PC Suite の MultimediaPlayer.exe におけるヒープベースのバッファオーバーフローの脆弱性 Nokia PC Suite の MultimediaPlayer.exe には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0734 38165 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004501.html  View