CVE

Id
38398  
CVE No.
CVE-2009-0963  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to (1) UserView_list.php, (2) orders_list.php, (3) users_list.php, and (4) Administrator_list.php.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419101 38398 CVE-2009-0963 BUGTRAQ:20090317 PHPRunner SQL Injection  View
419102 38398 CVE-2009-0963 URL:http://www.securityfocus.com/archive/1/archive/1/501894/100/0/threaded  View
419103 38398 CVE-2009-0963 MILW0RM:8226  View
419104 38398 CVE-2009-0963 URL:http://www.milw0rm.com/exploits/8226  View
419105 38398 CVE-2009-0963 MISC:http://www.bugreport.ir/index_63.htm  View
419106 38398 CVE-2009-0963 BID:34146  View
419107 38398 CVE-2009-0963 URL:http://www.securityfocus.com/bid/34146  View
419108 38398 CVE-2009-0963 OSVDB:52798  View
419109 38398 CVE-2009-0963 URL:http://osvdb.org/52798  View
419110 38398 CVE-2009-0963 OSVDB:52799  View
419111 38398 CVE-2009-0963 URL:http://osvdb.org/52799  View
419112 38398 CVE-2009-0963 OSVDB:52800  View
419113 38398 CVE-2009-0963 URL:http://osvdb.org/52800  View
419114 38398 CVE-2009-0963 OSVDB:52801  View
419115 38398 CVE-2009-0963 URL:http://osvdb.org/52801  View
419116 38398 CVE-2009-0963 SECUNIA:34330  View
419117 38398 CVE-2009-0963 URL:http://secunia.com/advisories/34330  View
419118 38398 CVE-2009-0963 VUPEN:ADV-2009-0750  View
419119 38398 CVE-2009-0963 URL:http://www.vupen.com/english/advisories/2009/0750  View
419120 38398 CVE-2009-0963 XF:phprunner-searchfield-sql-injection(49278)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44885 JVNDB-2009-005892 Serv-U の FTP サーバにおけるサービス運用妨害 (DoS) の脆弱性 Serv-U の FTP サーバには、サービス運用妨害 (サービスハング) 状態となる脆弱性が存在します。 CVE-2009-0967 38398 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005892.html  View