CVE

Id
42233  
CVE No.
CVE-2009-4798  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and the (2) brugerid and (3) password fields to the administration login feature.  
Phase
Assigned (20100422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461723 42233 CVE-2009-4798 MILW0RM:8307  View
461724 42233 CVE-2009-4798 URL:http://www.milw0rm.com/exploits/8307  View
461725 42233 CVE-2009-4798 BID:34289  View
461726 42233 CVE-2009-4798 URL:http://www.securityfocus.com/bid/34289  View
461727 42233 CVE-2009-4798 SECUNIA:34540  View
461728 42233 CVE-2009-4798 URL:http://secunia.com/advisories/34540  View
461729 42233 CVE-2009-4798 XF:diskos-login-sql-injection(49510)  View
461730 42233 CVE-2009-4798 URL:http://xforce.iss.net/xforce/xfdb/49510  View
461731 42233 CVE-2009-4798 XF:diskos-side-sql-injection(49509)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38611 JVNDB-2010-004396 TYPO3 の flatmgr 拡張における SQL インジェクションの脆弱性 TYPO3 の Flat Manager (flatmgr) 拡張には、SQL インジェクションの脆弱性が存在します。 CVE-2009-4802 42233 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004396.html  View