CVE

Id
40690  
CVE No.
CVE-2009-3255  
Status
Candidate  
Description
SQL injection vulnerability in RASH Quote Management System (RQMS) 1.2.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI.  
Phase
Assigned (20090918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
446460 40690 CVE-2009-3255 MISC:http://packetstormsecurity.org/0908-exploits/rqms-bypass.txt  View
446461 40690 CVE-2009-3255 OSVDB:57468  View
446462 40690 CVE-2009-3255 URL:http://osvdb.org/57468  View
446463 40690 CVE-2009-3255 SECUNIA:36477  View
446464 40690 CVE-2009-3255 URL:http://secunia.com/advisories/36477  View
446465 40690 CVE-2009-3255 VUPEN:ADV-2009-2446  View
446466 40690 CVE-2009-3255 URL:http://www.vupen.com/english/advisories/2009/2446  View
446467 40690 CVE-2009-3255 XF:rqms-search-sql-injection(52895)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45315 JVNDB-2009-006322 RQMS における SQL インジェクションの脆弱性 RASH Quote Management System (RQMS) には、SQL インジェクションの脆弱性が存在します。 CVE-2009-3259 40690 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006322.html  View