NVD

Id
1855  
Name
CVE-2008-1918  
Description
SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submit_info[] parameter in a link submission action. NOTE: it was later reported that 7.00.2 is also affected.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-04-23  
Modified Date
2011-08-05  
Seq
2008-1918  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
11976 1855 CVE-2008-1918 5470  View
11977 1855 CVE-2008-1918 7576  View
11978 1855 CVE-2008-1918 http://www.php-fusion.co.uk/news.php  View
11979 1855 CVE-2008-1918 28855  View
11980 1855 CVE-2008-1918 ADV-2008-1318  View
11981 1855 CVE-2008-1918 phpfusion-submit-sql-injection(41914)  View
11982 1855 CVE-2008-1918 phpfusion-submitinfo-sql-injection(47610)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50404 JVNDB-2008-005714 PHP-Fusion の submit.php における SQL インジェクションの脆弱性 PHP-Fusion の submit.php には、magic_quotes_gpc が無効になっている、およびデータベーステーブルプレフィックスが known になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-1918 32031 CVE-2008-1918 1855 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005714.html 2008-04-23 2012-12-20 View