CVE

Id
43536  
CVE No.
CVE-2010-0952  
Status
Candidate  
Description
SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action.  
Phase
Assigned (20100309)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
474353 43536 CVE-2010-0952 MISC:http://packetstormsecurity.org/1003-exploits/onecmsv25-sql.txt  View
474354 43536 CVE-2010-0952 EXPLOIT-DB:11635  View
474355 43536 CVE-2010-0952 URL:http://www.exploit-db.com/exploits/11635  View
474356 43536 CVE-2010-0952 BID:38557  View
474357 43536 CVE-2010-0952 URL:http://www.securityfocus.com/bid/38557  View
474358 43536 CVE-2010-0952 SECUNIA:30378  View
474359 43536 CVE-2010-0952 URL:http://secunia.com/advisories/30378  View
474360 43536 CVE-2010-0952 XF:onecms-index-sql-injection(56700)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38787 JVNDB-2010-004572 OpenCart の index.php における SQL インジェクションの脆弱性 OpenCart の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-0956 43536 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004572.html  View