NVD

Id
3749  
Name
CVE-2008-3887  
Description
Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in a viewuser action.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-02  
Modified Date
2008-09-17  
Seq
2008-3887  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23728 3749 CVE-2008-3887 http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt  View
23729 3749 CVE-2008-3887 30924  View
23730 3749 CVE-2008-3887 dotproject-tab-sql-injection(44771)  View
23731 3749 CVE-2008-3887 dotproject-userid-sql-injection(44772)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48086 JVNDB-2008-003396 dotProject の index.php における SQL インジェクションの脆弱性 dotProject の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3887 34000 CVE-2008-3887 3749 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003396.html 2008-09-02 2012-06-26 View