CVE

Id
39671  
CVE No.
CVE-2009-2236  
Status
Candidate  
Description
SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090627)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436206 39671 CVE-2009-2236 MILW0RM:8761  View
436207 39671 CVE-2009-2236 URL:http://www.milw0rm.com/exploits/8761  View
436208 39671 CVE-2009-2236 BID:35059  View
436209 39671 CVE-2009-2236 URL:http://www.securityfocus.com/bid/35059  View
436210 39671 CVE-2009-2236 SECUNIA:35192  View
436211 39671 CVE-2009-2236 URL:http://secunia.com/advisories/35192  View
436212 39671 CVE-2009-2236 XF:yourarticledirectory-login-sql-injection(50669)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39946 JVNDB-2009-000031 アドシステムズ製Ｗｅｂ会議室予約 フリー（無料）版 leger におけるクロスサイトスクリプティングの脆弱性 有限会社アドシステムズが提供するＷｅｂ会議室予約 フリー（無料）版 leger には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2240 39671 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html  View