CVE

Id
38399  
CVE No.
CVE-2009-0964  
Status
Candidate  
Description
UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419121 38399 CVE-2009-0964 BUGTRAQ:20090317 PHPRunner SQL Injection  View
419122 38399 CVE-2009-0964 URL:http://www.securityfocus.com/archive/1/archive/1/501894/100/0/threaded  View
419123 38399 CVE-2009-0964 MILW0RM:8226  View
419124 38399 CVE-2009-0964 URL:http://www.milw0rm.com/exploits/8226  View
419125 38399 CVE-2009-0964 MISC:http://www.bugreport.ir/index_63.htm  View
419126 38399 CVE-2009-0964 OSVDB:52804  View
419127 38399 CVE-2009-0964 URL:http://osvdb.org/52804  View
419128 38399 CVE-2009-0964 VUPEN:ADV-2009-0750  View
419129 38399 CVE-2009-0964 URL:http://www.vupen.com/english/advisories/2009/0750  View
419130 38399 CVE-2009-0964 XF:phprunner-userview-information-disclosure(49279)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42290 JVNDB-2009-003297 WordPress 用 fMoblog プラグインの fmoblog.php における SQL インジェクションの脆弱性 WordPress 用 fMoblog プラグインの fmoblog.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0968 38399 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003297.html  View