CVE

Id
55549  
CVE No.
CVE-2012-2306  
Status
Candidate  
Description
SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579560 55549 CVE-2012-2306 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579561 55549 CVE-2012-2306 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579562 55549 CVE-2012-2306 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579563 55549 CVE-2012-2306 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26685 JVNDB-2012-002392 PHP の sapi/cgi/cgi_main.c における任意のコードを実行される脆弱性 PHP の sapi/cgi/cgi_main.c は、CGI スクリプトとして設定される際、%3D 文字列を含み = (等号) 文字を含まないクエリ文字列を適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-2311 55549 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002392.html  View