CVE

Id
59117  
CVE No.
CVE-2012-5874  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATH_INFO to (a) checkuser.php, (b) groups.php, (c) index.php, (d) login.php, (e) quicklogin.php, (f) register.php, (g) Search.php, (h) viewboard.php, or (i) viewtopic.php.  
Phase
Assigned (20121116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603520 59117 CVE-2012-5874 BUGTRAQ:20121219 Multiple SQL Injection Vulnerabilities in Elite Bulletin Board  View
603521 59117 CVE-2012-5874 URL:http://archives.neohapsis.com/archives/bugtraq/2012-12/0114.html  View
603522 59117 CVE-2012-5874 EXPLOIT-DB:23575  View
603523 59117 CVE-2012-5874 URL:http://www.exploit-db.com/exploits/23575  View
603524 59117 CVE-2012-5874 MISC:http://packetstormsecurity.com/files/118962/Elite-Bulletin-Board-2.1.21-SQL-Injection.html  View
603525 59117 CVE-2012-5874 MISC:https://www.htbridge.com/advisory/HTB23133  View
603526 59117 CVE-2012-5874 CONFIRM:http://elite-board.us/Community/viewtopic.php?bid=1&tid=310  View
603527 59117 CVE-2012-5874 OSVDB:88531  View
603528 59117 CVE-2012-5874 URL:http://www.osvdb.org/88531  View
603529 59117 CVE-2012-5874 SECUNIA:51622  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20503 JVNDB-2013-002078 McAfee Virtual Technician および ePO-MVT における任意のファイルを変更または作成される脆弱性 McAfee Virtual Technician (MVT) および ePO-MVT の McHealthCheck.dll の ActiveX コントロールには、任意のファイルを変更または作成される脆弱性が存在します。 CVE-2012-5879 59117 8.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002078.html  View