NVD

Id
1833  
Name
CVE-2008-1895  
Description
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to events.asp, the (2) UserName parameter to getpassword.asp, and possibly an unspecified parameter to (3) option_Update.asp in an edit action.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-04-18  
Modified Date
2008-09-05  
Seq
2008-1895  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
11880 1833 CVE-2008-1895 http://bugreport.ir/index.php?/35  View
11881 1833 CVE-2008-1895 http://bugreport.ir/index.php?/35/exploit  View
11882 1833 CVE-2008-1895 5456  View
11883 1833 CVE-2008-1895 20080416 Carbon Communities forum Multiple Vulnerabilities.  View
11884 1833 CVE-2008-1895 28806  View
11885 1833 CVE-2008-1895 carboncommunities-id-sql-injection(41845)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47658 JVNDB-2008-002968 Carbon Communities における SQL インジェクションの脆弱性 Carbon Communities には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1895 32008 CVE-2008-1895 1833 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002968.html 2008-04-18 2012-06-26 View