CVE

Id
38643  
CVE No.
CVE-2009-1208  
Status
Candidate  
Description
SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.  
Phase
Assigned (20090331)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423169 38643 CVE-2009-1208 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823  View
423170 38643 CVE-2009-1208 CONFIRM:http://www.auth2db.com.ar/?title=CHANGELOG  View
423171 38643 CVE-2009-1208 DEBIAN:DSA-1757  View
423172 38643 CVE-2009-1208 URL:http://www.debian.org/security/2009/dsa-1757  View
423173 38643 CVE-2009-1208 BID:34287  View
423174 38643 CVE-2009-1208 URL:http://www.securityfocus.com/bid/34287  View
423175 38643 CVE-2009-1208 SECUNIA:34488  View
423176 38643 CVE-2009-1208 URL:http://secunia.com/advisories/34488  View
423177 38643 CVE-2009-1208 XF:auth2db-unspecified-sql-injection(49518)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44921 JVNDB-2009-005928 DMATRIXLib.Datamatrix の PRECIS~2.DLL における任意のファイルを上書きされる脆弱性 PrecisionID Datamatrix ActiveX コントロール (DMATRIXLib.Datamatrix) の PRECIS~2.DLL は、安全でないメソッドにより、任意のファイルを上書きされる脆弱性が存在します。 CVE-2009-1212 38643 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005928.html  View