NVD

Id
43480  
Name
CVE-2012-1603  
Description
Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the (1) curstr parameter in the findUsers function, (2) id parameter in the isIdAvailable function, or (3) username parameter in the getGreetings function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-01  
Modified Date
2012-10-02  
Seq
2012-1603  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218509 43480 CVE-2012-1603 20120327 [waraxe-2012-SA#080] - Multiple Vulnerabilities in NextBBS 0.6.0  View
218510 43480 CVE-2012-1603 http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html  View
218511 43480 CVE-2012-1603 [oss-security] 20120329 CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080  View
218512 43480 CVE-2012-1603 [oss-security] 20120329 Re: CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080  View
218513 43480 CVE-2012-1603 52728  View
218514 43480 CVE-2012-1603 http://www.waraxe.us/advisory-80.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29002 JVNDB-2012-004709 NextBBS の ajaxserver.php における SQL インジェクションの脆弱性 NextBBS の ajaxserver.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-1603 54841 CVE-2012-1603 43480 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004709.html 2012-10-01 2012-10-03 View