CVE

Id
79347  
CVE No.
CVE-2015-2070  
Status
Candidate  
Description
SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed.  
Phase
Assigned (20150224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721557 79347 CVE-2015-2070 EXPLOIT-DB:36089  View
721558 79347 CVE-2015-2070 URL:http://www.exploit-db.com/exploits/36089  View
721559 79347 CVE-2015-2070 FULLDISC:20150213 eTouch SamePage v4.4.0.0.239 multiple vulnerabilities  View
721560 79347 CVE-2015-2070 URL:http://seclists.org/fulldisclosure/2015/Feb/47  View
721561 79347 CVE-2015-2070 MISC:http://packetstormsecurity.com/files/130386/eTouch-Samepage-4.4.0.0.239-SQL-Injection-File-Read.html  View
721562 79347 CVE-2015-2070 BID:74883  View
721563 79347 CVE-2015-2070 URL:http://www.securityfocus.com/bid/74883  View
721564 79347 CVE-2015-2070 OSVDB:118356  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7486 JVNDB-2015-002806 HP SDN VAN Controller デバイス上で稼動する REST レイヤーにおけるサービス運用妨害 (DoS) の脆弱性 HP SDN VAN Controller デバイス上で稼動する REST レイヤーには、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2015-2122 79347 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002806.html  View