CVE

Id
38922  
CVE No.
CVE-2009-1487  
Status
Candidate  
Description
SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

-->
Id CVE Id CVE No. Reference Actions
427358 38922 CVE-2009-1487 BUGTRAQ:20090420 Multiple Remote Vulnerabilities--SQLi-(INSECURE-COOKIE-HANDLING)-LFI-->  View
427359 38922 CVE-2009-1487 URL:http://marc.info/?l=bugtraq&m=124025031126068&w=2  View
427360 38922 CVE-2009-1487 MILW0RM:8493  View
427361 38922 CVE-2009-1487 URL:http://www.milw0rm.com/exploits/8493  View
427362 38922 CVE-2009-1487 BID:34610  View
427363 38922 CVE-2009-1487 URL:http://www.securityfocus.com/bid/34610  View
427364 38922 CVE-2009-1487 VUPEN:ADV-2009-1117  View
427365 38922 CVE-2009-1487 URL:http://www.vupen.com/english/advisories/2009/1117  View
427366 38922 CVE-2009-1487 XF:fungamez-login-sql-injection(50090)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43612 JVNDB-2009-004619 McAfee GroupShield などにおけるウイルス検出を回避される脆弱性 Exchange Server 2000 上で稼動する Microsoft Exchange 用の McAfee GroupShield、および McAfee またはその他のベンダのアンチウイルスまたはアンチスパム製品は、不正な形式のコンテンツの X ヘッダをスキャンしないため、ウイルス検出を回避される脆弱性が存在します。 CVE-2009-1491 38922 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004619.html  View