CVE

Id
40930  
CVE No.
CVE-2009-3495  
Status
Candidate  
Description
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465.  
Phase
Assigned (20090930)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448315 40930 CVE-2009-3495 MISC:http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity  View
448316 40930 CVE-2009-3495 BID:36487  View
448317 40930 CVE-2009-3495 URL:http://www.securityfocus.com/bid/36487  View
448318 40930 CVE-2009-3495 SECUNIA:36843  View
448319 40930 CVE-2009-3495 URL:http://secunia.com/advisories/36843  View
448320 40930 CVE-2009-3495 VUPEN:ADV-2009-2735  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42798 JVNDB-2009-003805 BPowerHouse BPLawyerCaseDocuments の employee.aspx における SQL インジェクションの脆弱性 BPowerHouse BPLawyerCaseDocuments の employee.aspx には、SQL インジェクションの脆弱性が存在します。 CVE-2009-3499 40930 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003805.html  View