CVE

Id
8751  
CVE No.
CVE-2004-0323  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumdisplay.php, or (5) the addon parameter in stats.php. NOTE: it has also been shown that item (3) is also in XMB 1.9 beta.  
Phase
Modified (20051128)  
Votes
ACCEPT(1) Armstrong | NOOP(3) Cole, Cox, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
55158 8751 CVE-2004-0323 BUGTRAQ:20040223 [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2  View
55159 8751 CVE-2004-0323 URL:http://marc.info/?l=bugtraq&m=107756526625179&w=2  View
55160 8751 CVE-2004-0323 BUGTRAQ:20040225 Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2  View
55161 8751 CVE-2004-0323 URL:http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html  View
55162 8751 CVE-2004-0323 BUGTRAQ:20040326 [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta]  View
55163 8751 CVE-2004-0323 URL:http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html  View
55164 8751 CVE-2004-0323 CONFIRM:http://www.xmbforum.com/community/boards/viewthread.php?tid=746859  View
55165 8751 CVE-2004-0323 BID:9726  View
55166 8751 CVE-2004-0323 URL:http://www.securityfocus.com/bid/9726  View
55167 8751 CVE-2004-0323 XF:xmb-multiple-sql-injection(15295)  View

Related JVN