NVD

Id
11370  
Name
CVE-2011-5110  
Description
Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to (1) _authors_list.php, (2) _blogs_list.php, (3) _category_list.php, (4) _comments_list.php, (5) _policy_list.php, (6) _rate_list.php, (7) categoriesblogs_list.php, (8) chosen_authors_list.php, (9) chosen_blogs_list.php, (10) chosen_comments_list.php, and (11) help_list.php in blogs/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-08-23  
Modified Date
2012-08-24  
Seq
2011-5110  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62734 11370 CVE-2011-5110 20111118 Blogs manager <= 1.101 SQL Injection Vulnerability  View
62735 11370 CVE-2011-5110 http://sourceforge.net/tracker/?func=detail&aid=3506818&group_id=219284&atid=1045881  View
62736 11370 CVE-2011-5110 18129  View
62737 11370 CVE-2011-5110 20111119 Blogs manager <= 1.101 SQL Injection Vulnerability  View
62738 11370 CVE-2011-5110 50731  View
62739 11370 CVE-2011-5110 blogsmanager-searchfield-sql-injection(71401)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28155 JVNDB-2012-003862 Blogs Manager における SQL インジェクションの脆弱性 Blogs Manager には、SQL インジェクションの脆弱性が存在します。 CVE-2011-5110 53017 CVE-2011-5110 11370 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003862.html 2012-08-23 2012-08-27 View