NVD

Id
11961  
Name
CVE-2010-0404  
Description
Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgwapi/inc/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-05-19  
Modified Date
2010-05-26  
Seq
2010-0404  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
65809 11961 CVE-2010-0404 http://download.phpgroupware.org/  View
65810 11961 CVE-2010-0404 http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0  View
65811 11961 CVE-2010-0404 [phpgroupware-users] 20100512 Phpgroupware security release 0.9.16.016  View
65812 11961 CVE-2010-0404 DSA-2046  View
65813 11961 CVE-2010-0404 20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404)  View
65814 11961 CVE-2010-0404 ADV-2010-1145  View
65815 11961 CVE-2010-0404 ADV-2010-1146  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39472 JVNDB-2010-005257 phpgw における SQL インジェクションの脆弱性 phpGroupWare (phpgw) には、SQL インジェクションの脆弱性が存在します。 CVE-2010-0404 42984 CVE-2010-0404 11961 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005257.html 2010-05-19 2012-12-20 View