CVE

Id
47593  
CVE No.
CVE-2010-5009  
Status
Candidate  
Description
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action.  
Phase
Assigned (20111102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
518806 47593 CVE-2010-5009 EXPLOIT-DB:13854  View
518807 47593 CVE-2010-5009 URL:http://www.exploit-db.com/exploits/13854  View
518808 47593 CVE-2010-5009 MISC:http://packetstormsecurity.org/1006-exploits/utstats-sqlxss.txt  View
518809 47593 CVE-2010-5009 BID:40836  View
518810 47593 CVE-2010-5009 URL:http://www.securityfocus.com/bid/40836  View
518811 47593 CVE-2010-5009 SREASON:8506  View
518812 47593 CVE-2010-5009 URL:http://securityreason.com/securityalert/8506  View
518813 47593 CVE-2010-5009 VUPEN:ADV-2010-1465  View
518814 47593 CVE-2010-5009 URL:http://www.vupen.com/english/advisories/2010/1465  View
518815 47593 CVE-2010-5009 XF:utstats-index-sql-injection(59402)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33001 JVNDB-2011-003241 Mckenzie Creations Virtual Real Estate Manager における SQL インジェクションの脆弱性 Mckenzie Creations Virtual Real Estate Manager の listing_detail.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2010-5013 47593 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003241.html  View