CVE

Id
43532  
CVE No.
CVE-2010-0948  
Status
Candidate  
Description
SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.  
Phase
Assigned (20100309)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
474325 43532 CVE-2010-0948 MISC:http://packetstormsecurity.org/1003-exploits/bigforum-sql.txt  View
474326 43532 CVE-2010-0948 EXPLOIT-DB:11646  View
474327 43532 CVE-2010-0948 URL:http://www.exploit-db.com/exploits/11646  View
474328 43532 CVE-2010-0948 BID:38597  View
474329 43532 CVE-2010-0948 URL:http://www.securityfocus.com/bid/38597  View
474330 43532 CVE-2010-0948 OSVDB:62778  View
474331 43532 CVE-2010-0948 URL:http://osvdb.org/62778  View
474332 43532 CVE-2010-0948 SECUNIA:38872  View
474333 43532 CVE-2010-0948 URL:http://secunia.com/advisories/38872  View
474334 43532 CVE-2010-0948 XF:bigforum-profil-sql-injection(56723)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38785 JVNDB-2010-004570 OneCMS の index.php における SQL インジェクションの脆弱性 OneCMS の index.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2010-0952 43532 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004570.html  View