CVE

Id
59137  
CVE No.
CVE-2012-5894  
Status
Candidate  
Description
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603733 59137 CVE-2012-5894 MISC:http://packetstormsecurity.org/files/111358/Havalite-CMS-Shell-Upload-SQL-Injection-Disclosure.html  View
603734 59137 CVE-2012-5894 OSVDB:80769  View
603735 59137 CVE-2012-5894 URL:http://osvdb.org/80769  View
603736 59137 CVE-2012-5894 SECUNIA:48646  View
603737 59137 CVE-2012-5894 URL:http://secunia.com/advisories/48646  View
603738 59137 CVE-2012-5894 XF:havalite-havapost-sql-injection(74487)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29687 JVNDB-2012-005394 SAMEDIA LandShop の admin/action/objects.php におけるクロスサイトスクリプティングの脆弱性 SAMEDIA LandShop の admin/action/objects.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5899 59137 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005394.html  View