CVE

Id
80120  
CVE No.
CVE-2015-2843  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4) index.php/go_site/go_get_user_info/.  
Phase
Assigned (20150403)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
725659 80120 CVE-2015-2843 BUGTRAQ:20150421 GoAutoDial 3.3 multiple vulnerabilities  View
725660 80120 CVE-2015-2843 URL:http://www.securityfocus.com/archive/1/archive/1/535319/100/1100/threaded  View
725661 80120 CVE-2015-2843 EXPLOIT-DB:36807  View
725662 80120 CVE-2015-2843 URL:https://www.exploit-db.com/exploits/36807/  View
725663 80120 CVE-2015-2843 MISC:http://packetstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.html  View
725664 80120 CVE-2015-2843 CONFIRM:http://goautodial.org/news/21  View
725665 80120 CVE-2015-2843 BID:74281  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11262 JVNDB-2015-006582 Idera Uptime Infrastructure Monitor の up.time クライアントにおけるバッファオーバーフローの脆弱性 Idera Uptime Infrastructure Monitor の up.time クライアントには、バッファオーバーフローの脆弱性が存在します。 CVE-2015-2895 80120 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006582.html  View