NVD

Id
5613  
Name
CVE-2008-5882  
Description
SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-01-09  
Modified Date
2009-01-29  
Seq
2008-5882  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34788 5613 CVE-2008-5882 4889  View
34789 5613 CVE-2008-5882 http://support.citrix.com/article/CTX119315  View
34790 5613 CVE-2008-5882 20081223 DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832  View
34791 5613 CVE-2008-5882 32832  View
34792 5613 CVE-2008-5882 1021411  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40614 JVNDB-2009-001620 Citrix Application Gateway Broadcast Server (BCS) の login.asp における SQL インジェクションの脆弱性 Citrix Application Gateway Broadcast Server (BCS) の login.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2008-5882 35995 CVE-2008-5882 5613 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001620.html 2009-01-09 2009-07-08 View