CVE

Id
48355  
CVE No.
CVE-2011-0443  
Status
Candidate  
Description
SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20110112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
525072 48355 CVE-2011-0443 EXPLOIT-DB:15961  View
525073 48355 CVE-2011-0443 URL:http://www.exploit-db.com/exploits/15961  View
525074 48355 CVE-2011-0443 CONFIRM:http://tinybb.net/forum/?page=thread&post=989525101  View
525075 48355 CVE-2011-0443 BID:45737  View
525076 48355 CVE-2011-0443 URL:http://www.securityfocus.com/bid/45737  View
525077 48355 CVE-2011-0443 OSVDB:70394  View
525078 48355 CVE-2011-0443 URL:http://osvdb.org/70394  View
525079 48355 CVE-2011-0443 SECTRACK:1024949  View
525080 48355 CVE-2011-0443 URL:http://www.securitytracker.com/id?1024949  View
525081 48355 CVE-2011-0443 SECUNIA:42854  View
525082 48355 CVE-2011-0443 URL:http://secunia.com/advisories/42854  View
525083 48355 CVE-2011-0443 XF:tinybb-index-sql-injection(64570)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33883 JVNDB-2011-004125 Ruby on Rails における SQL インジェクションの脆弱性 Ruby on Rails は、整数値を指定する limit 関数への引数を確認しないため、SQL インジェクションの脆弱性が存在します。 CVE-2011-0448 48355 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004125.html  View