CVE

Id
42226  
CVE No.
CVE-2009-4791  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to addressbook.php, (2) id parameter to recipes.php, (3) year parameter to register.php, (4) poll_id parameter to home.php, and (5) email parameter to lostpw.php.  
Phase
Assigned (20100422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461677 42226 CVE-2009-4791 BUGTRAQ:20090330 Family Connections 1.8.1 Multiple Remote Vulnerabilities  View
461678 42226 CVE-2009-4791 URL:http://www.securityfocus.com/archive/1/archive/1/502272/100/0/threaded  View
461679 42226 CVE-2009-4791 MILW0RM:8319  View
461680 42226 CVE-2009-4791 URL:http://www.milw0rm.com/exploits/8319  View
461681 42226 CVE-2009-4791 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=672266  View
461682 42226 CVE-2009-4791 CONFIRM:http://sourceforge.net/tracker/?func=detail&aid=2722736&group_id=189733&atid=930513  View
461683 42226 CVE-2009-4791 CONFIRM:http://www.familycms.com/blog/2009/03/fcms-182-released/  View
461684 42226 CVE-2009-4791 BID:34297  View
461685 42226 CVE-2009-4791 URL:http://www.securityfocus.com/bid/34297  View
461686 42226 CVE-2009-4791 SECUNIA:34503  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39337 JVNDB-2010-005122 Xlight FTP Server における SQL インジェクションの脆弱性 Xlight FTP Server には、ODBC 認証が有効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2009-4795 42226 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005122.html  View