CVE

Id
46065  
CVE No.
CVE-2010-3481  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) password variables, possibly related to include/classes/Login.php. NOTE: some of these details are obtained from third party information. NOTE: the password vector might not be vulnerable.  
Phase
Assigned (20100922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501046 46065 CVE-2010-3481 EXPLOIT-DB:15011  View
501047 46065 CVE-2010-3481 URL:http://www.exploit-db.com/exploits/15011  View
501048 46065 CVE-2010-3481 VIM:20100922 MOAUB #15 - PHP MicroCMS 1.0.1  View
501049 46065 CVE-2010-3481 URL:http://www.attrition.org/pipermail/vim/2010-September/002439.html  View
501050 46065 CVE-2010-3481 BID:43232  View
501051 46065 CVE-2010-3481 URL:http://www.securityfocus.com/bid/43232  View
501052 46065 CVE-2010-3481 OSVDB:68073  View
501053 46065 CVE-2010-3481 URL:http://osvdb.org/68073  View
501054 46065 CVE-2010-3481 SECUNIA:41455  View
501055 46065 CVE-2010-3481 URL:http://secunia.com/advisories/41455  View
501056 46065 CVE-2010-3481 SECUNIA:41492  View
501057 46065 CVE-2010-3481 URL:http://secunia.com/advisories/41492  View
501058 46065 CVE-2010-3481 XF:phpmicrocms-login-sql-injection(61810)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37358 JVNDB-2010-003143 LightNEasy の common.php における SQL インジェクションの脆弱性 LightNEasy の common.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-3485 46065 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003143.html  View