CVE

Id
59153  
CVE No.
CVE-2012-5910  
Status
Candidate  
Description
SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603859 59153 CVE-2012-5910 MISC:http://b2evolution.net/news/2012/04/06/b2evolution-4-1-4-stable  View
603860 59153 CVE-2012-5910 MISC:http://packetstormsecurity.org/files/111294/B2Evolution-CMS-4.1.3-SQL-Injection.html  View
603861 59153 CVE-2012-5910 MISC:http://vulnerability-lab.com/get_content.php?id=482  View
603862 59153 CVE-2012-5910 BID:52783  View
603863 59153 CVE-2012-5910 URL:http://www.securityfocus.com/bid/52783  View
603864 59153 CVE-2012-5910 OSVDB:80671  View
603865 59153 CVE-2012-5910 URL:http://osvdb.org/80671  View
603866 59153 CVE-2012-5910 XF:b2evolutioncms-viewfile-sql-injection(74457)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29703 JVNDB-2012-005410 Neocrome Seditio における重要な情報を取得される脆弱性 Neocrome Seditio には、エラーメッセージ内にインストールパスを表示させるため、重要な情報を取得される脆弱性が存在します。 CVE-2012-5915 59153 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005410.html  View