CVE

Id
38888  
CVE No.
CVE-2009-1453  
Status
Candidate  
Description
SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field). NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
427095 38888 CVE-2009-1453 BUGTRAQ:20090417 Tiny Blogr 1.0.0 rc4 Authentication Bypass  View
427096 38888 CVE-2009-1453 URL:http://www.securityfocus.com/archive/1/archive/1/502747/100/0/threaded  View
427097 38888 CVE-2009-1453 MILW0RM:8464  View
427098 38888 CVE-2009-1453 URL:http://www.milw0rm.com/exploits/8464  View
427099 38888 CVE-2009-1453 BID:34581  View
427100 38888 CVE-2009-1453 URL:http://www.securityfocus.com/bid/34581  View
427101 38888 CVE-2009-1453 SECUNIA:34768  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42366 JVNDB-2009-003373 Nuke Evolution Xtreme の player.php におけるクロスサイトスクリプティングの脆弱性 Nuke Evolution Xtreme の player.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1457 38888 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003373.html  View