CVE

Id
42231  
CVE No.
CVE-2009-4796  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in glFusion 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) order and (2) direction parameters to search.php.  
Phase
Assigned (20100422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461705 42231 CVE-2009-4796 BUGTRAQ:20090329 glFusion <= 1.1.2 COM_applyFilter()/order sql injection exploit  View
461706 42231 CVE-2009-4796 URL:http://www.securityfocus.com/archive/1/archive/1/502260/100/0/threaded  View
461707 42231 CVE-2009-4796 MILW0RM:8302  View
461708 42231 CVE-2009-4796 URL:http://www.milw0rm.com/exploits/8302  View
461709 42231 CVE-2009-4796 CONFIRM:http://www.glfusion.org/article.php/security_20090329  View
461710 42231 CVE-2009-4796 BID:34281  View
461711 42231 CVE-2009-4796 URL:http://www.securityfocus.com/bid/34281  View
461712 42231 CVE-2009-4796 OSVDB:52984  View
461713 42231 CVE-2009-4796 URL:http://osvdb.org/52984  View
461714 42231 CVE-2009-4796 SECUNIA:34519  View
461715 42231 CVE-2009-4796 URL:http://secunia.com/advisories/34519  View
461716 42231 CVE-2009-4796 XF:glfusion-class-sql-injection(49498)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39338 JVNDB-2010-005123 Sysax Multi Server におけるディレクトリトラバーサルの脆弱性 Sysax Multi Server には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-4800 42231 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005123.html  View