CVE

Id
42240  
CVE No.
CVE-2009-4805  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the storyid parameter to public/view.php or (2) the kill parameter to admin/remove.php.  
Phase
Assigned (20100423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461761 42240 CVE-2009-4805 BUGTRAQ:20090301 EZ-Blog Beta 1 Multiple SQL Injection  View
461762 42240 CVE-2009-4805 URL:http://www.securityfocus.com/archive/1/archive/1/501352/100/0/threaded  View
461763 42240 CVE-2009-4805 MILW0RM:8128  View
461764 42240 CVE-2009-4805 URL:http://www.milw0rm.com/exploits/8128  View
461765 42240 CVE-2009-4805 BID:33947  View
461766 42240 CVE-2009-4805 URL:http://www.securityfocus.com/bid/33947  View
461767 42240 CVE-2009-4805 XF:ezblog-view-sql-injection(49013)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39341 JVNDB-2010-005126 EFS Web Server の thumbnail.ghp におけるディレクトリトラバーサルの脆弱性 Easy File Sharing (EFS) Web Server の thumbnail.ghp には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-4809 42240 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005126.html  View