CVE

Id
47084  
CVE No.
CVE-2010-4500  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) subject, and (4) message parameters in a sendmess action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20101208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
514967 47084 CVE-2010-4500 BID:45067  View
514968 47084 CVE-2010-4500 URL:http://www.securityfocus.com/bid/45067  View
514969 47084 CVE-2010-4500 SECUNIA:42313  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37701 JVNDB-2010-003486 eSyndiCat Directory におけるクロスサイトスクリプティングの脆弱性 eSyndiCat Directory にはクロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-4504 47084 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003486.html  View