CVE

Id
75800  
CVE No.
CVE-2014-8499  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1) SQLAdvancedALSearchResult.cc or (2) AdvancedSearchResult.cc.  
Phase
Assigned (20141028)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
700840 75800 CVE-2014-8499 EXPLOIT-DB:35210  View
700841 75800 CVE-2014-8499 URL:http://www.exploit-db.com/exploits/35210  View
700842 75800 CVE-2014-8499 FULLDISC:20141109 [The ManageOwnage Series, part VII]: Super admin privesc + password DB dump in Password Manager Pro  View
700843 75800 CVE-2014-8499 URL:http://seclists.org/fulldisclosure/2014/Nov/18  View
700844 75800 CVE-2014-8499 MISC:http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html  View
700845 75800 CVE-2014-8499 MISC:https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_pmp_privesc.txt  View
700846 75800 CVE-2014-8499 BID:71018  View
700847 75800 CVE-2014-8499 URL:http://www.securityfocus.com/bid/71018  View
700848 75800 CVE-2014-8499 OSVDB:114484  View
700849 75800 CVE-2014-8499 URL:http://osvdb.org/show/osvdb/114484  View
700850 75800 CVE-2014-8499 OSVDB:114485  View
700851 75800 CVE-2014-8499 URL:http://osvdb.org/show/osvdb/114485  View
700852 75800 CVE-2014-8499 XF:passwordmanager-cve20148499-sql-injection(98597)  View
700853 75800 CVE-2014-8499 URL:http://xforce.iss.net/xforce/xfdb/98597  View
700854 75800 CVE-2014-8499 XF:pmp-cve20148499-sql-injection(98595)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18351 JVNDB-2014-007226 Android の WAPPushManager モジュールにおける SQL インジェクションの脆弱性 Android の WAPPushManager モジュールの packages/WAPPushManager/src/com/android/smspush/WapPushManager.java 内の queryLastApp メソッドには、SQL インジェクションの脆弱性が存在します。 CVE-2014-8507 75800 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007226.html  View