CVE

Id
47596  
CVE No.
CVE-2010-5012  
Status
Candidate  
Description
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20111102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
518836 47596 CVE-2010-5012 EXPLOIT-DB:13830  View
518837 47596 CVE-2010-5012 URL:http://www.exploit-db.com/exploits/13830/  View
518838 47596 CVE-2010-5012 MISC:http://packetstormsecurity.org/1006-exploits/dalogin-sqlxssdisclose.txt  View
518839 47596 CVE-2010-5012 BID:40810  View
518840 47596 CVE-2010-5012 URL:http://www.securityfocus.com/bid/40810  View
518841 47596 CVE-2010-5012 OSVDB:65471  View
518842 47596 CVE-2010-5012 URL:http://osvdb.org/65471  View
518843 47596 CVE-2010-5012 SECUNIA:40204  View
518844 47596 CVE-2010-5012 URL:http://secunia.com/advisories/40204  View
518845 47596 CVE-2010-5012 SREASON:8509  View
518846 47596 CVE-2010-5012 URL:http://securityreason.com/securityalert/8509  View
518847 47596 CVE-2010-5012 XF:dalogin-id-sql-injection(59390)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32998 JVNDB-2011-003238 Elite Gaming Ladders における SQL インジェクションの脆弱性 Elite Gaming Ladders の matchdb.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-5016 47596 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003238.html  View