CVE

Id
63474  
CVE No.
CVE-2013-3527  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest.  
Phase
Assigned (20130510)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
629673 63474 CVE-2013-3527 BUGTRAQ:20130405 Vanilla Forums 2.0.18 / SQL-Injection / Insert arbitrary user & dump usertable  View
629674 63474 CVE-2013-3527 URL:http://archives.neohapsis.com/archives/bugtraq/2013-04/0068.html  View
629675 63474 CVE-2013-3527 EXPLOIT-DB:24927  View
629676 63474 CVE-2013-3527 URL:http://www.exploit-db.com/exploits/24927  View
629677 63474 CVE-2013-3527 FULLDISC:20130407 Vanilla Forums 2.0.18 / SQL-Injection / Insert arbitrary user & dump usertable  View
629678 63474 CVE-2013-3527 URL:http://seclists.org/fulldisclosure/2013/Apr/57  View
629679 63474 CVE-2013-3527 MISC:http://mfs-enterprise.com/wordpress/2013/04/05/vanilla-forums-2-0-18-sql-injection-insert-arbitrary-user-dump-usertable/  View
629680 63474 CVE-2013-3527 MISC:http://packetstormsecurity.com/files/121151/Vanilla-Forums-2.0.18.4-SQL-Injection.html  View
629681 63474 CVE-2013-3527 CONFIRM:http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7  View
629682 63474 CVE-2013-3527 CONFIRM:https://github.com/vanillaforums/Garden/commit/83078591bc4d263e77d2a2ca283100997755290d  View
629683 63474 CVE-2013-3527 BID:58922  View
629684 63474 CVE-2013-3527 URL:http://www.securityfocus.com/bid/58922  View
629685 63474 CVE-2013-3527 OSVDB:92109  View
629686 63474 CVE-2013-3527 URL:http://osvdb.org/92109  View
629687 63474 CVE-2013-3527 OSVDB:92110  View
629688 63474 CVE-2013-3527 URL:http://osvdb.org/92110  View
629689 63474 CVE-2013-3527 SECUNIA:52825  View
629690 63474 CVE-2013-3527 URL:http://secunia.com/advisories/52825  View
629691 63474 CVE-2013-3527 XF:vanillaforums-multiple-sql-injection(83289)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21065 JVNDB-2013-002640 Drupal 用 Web Dorado Spider Video Player プラグインの settings.php における SQL インジェクションの脆弱性 Drupal 用 Web Dorado Spider Video Player プラグインの settings.php には、SQL インジェクションの脆弱性が存在します。 CVE-2013-3532 63474 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002640.html  View