CVE

Id
41492  
CVE No.
CVE-2009-4057  
Status
Candidate  
Description
SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php.  
Phase
Assigned (20091123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455943 41492 CVE-2009-4057 MISC:http://www.packetstormsecurity.org/0911-exploits/joomlanexus-sql.txt  View
455944 41492 CVE-2009-4057 BID:37050  View
455945 41492 CVE-2009-4057 URL:http://www.securityfocus.com/bid/37050  View
455946 41492 CVE-2009-4057 OSVDB:60308  View
455947 41492 CVE-2009-4057 URL:http://osvdb.org/60308  View
455948 41492 CVE-2009-4057 SECUNIA:37408  View
455949 41492 CVE-2009-4057 URL:http://secunia.com/advisories/37408  View
455950 41492 CVE-2009-4057 XF:ifportfolionexus-id-sql-injection(54325)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45476 JVNDB-2009-006483 Drupal 用の Agreement モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用の Agreement モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4061 41492 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006483.html  View