CVE

Id
76559  
CVE No.
CVE-2014-9258  
Status
Candidate  
Description
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter.  
Phase
Assigned (20141204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
704152 76559 CVE-2014-9258 EXPLOIT-DB:35528  View
704153 76559 CVE-2014-9258 URL:http://www.exploit-db.com/exploits/35528  View
704154 76559 CVE-2014-9258 MISC:http://security.szurek.pl/glpi-085-blind-sql-injection.html  View
704155 76559 CVE-2014-9258 CONFIRM:http://www.glpi-project.org/spip.php?page=annonce&id_breve=334&lang=en  View
704156 76559 CVE-2014-9258 CONFIRM:http://advisories.mageia.org/MGASA-2015-0017.html  View
704157 76559 CVE-2014-9258 FEDORA:FEDORA-2014-17497  View
704158 76559 CVE-2014-9258 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147296.html  View
704159 76559 CVE-2014-9258 FEDORA:FEDORA-2014-17508  View
704160 76559 CVE-2014-9258 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147313.html  View
704161 76559 CVE-2014-9258 FEDORA:FEDORA-2014-17520  View
704162 76559 CVE-2014-9258 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147271.html  View
704163 76559 CVE-2014-9258 MANDRIVA:MDVSA-2015:167  View
704164 76559 CVE-2014-9258 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:167  View
704165 76559 CVE-2014-9258 OSVDB:115957  View
704166 76559 CVE-2014-9258 URL:http://osvdb.org/show/osvdb/115957  View
704167 76559 CVE-2014-9258 SECUNIA:61367  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16944 JVNDB-2014-005819 Samsung SmartViewer の STWConfig ActiveX コントロールにおける任意のコードを実行される脆弱性 Samsung SmartViewer の STWConfig ActiveX コントロールは、変数を適切に初期化しないため、任意のコードを実行される脆弱性が存在します。 CVE-2014-9266 76559 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005819.html  View