NVD

Id
1498  
Name
CVE-2008-1554  
Description
SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a non-alphanumeric first character the localita parameter, which bypasses a protection mechanism.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-31  
Modified Date
2009-07-29  
Seq
2008-1554  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9676 1498 CVE-2008-1554 5311  View
9677 1498 CVE-2008-1554 20080327 TopperMod 2.0 Remote SQL Injection Vulnerability  View
9678 1498 CVE-2008-1554 28447  View
9679 1498 CVE-2008-1554 toppermod-mod-sql-injection(41441)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50327 JVNDB-2008-005637 TopperMod の account/index.php における SQL インジェクションの脆弱性 TopperMod の account/index.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-1554 31667 CVE-2008-1554 1498 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005637.html 2008-03-31 2012-12-20 View