CVE

Id
57082  
CVE No.
CVE-2012-3839  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the (1) invoice_number or (2) tags parameter to index.php/invoice_search.  
Phase
Assigned (20120703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
590327 57082 CVE-2012-3839 EXPLOIT-DB:18814  View
590328 57082 CVE-2012-3839 URL:http://www.exploit-db.com/exploits/18814  View
590329 57082 CVE-2012-3839 CONFIRM:http://myclientbase.com/  View
590330 57082 CVE-2012-3839 CONFIRM:https://bitbucket.org/jesseterry/myclientbase/changeset/789099396f05  View
590331 57082 CVE-2012-3839 BID:53311  View
590332 57082 CVE-2012-3839 URL:http://www.securityfocus.com/bid/53311  View
590333 57082 CVE-2012-3839 SECUNIA:48961  View
590334 57082 CVE-2012-3839 URL:http://secunia.com/advisories/48961  View
590335 57082 CVE-2012-3839 XF:myclientbase-index-sql-injection(75298)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27297 JVNDB-2012-003004 vBulletin におけるクロスサイトスクリプティングの脆弱性 vBulletin には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3844 57082 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003004.html  View