NVD

Id
8476  
Name
CVE-2011-1546  
Description
Multiple SQL injection vulnerabilities in Andy"s PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (3) id or (4) start parameter to pending.php, or the (5) aid parameter to a_authordetails.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-04-04  
Modified Date
2011-09-21  
Seq
2011-1546  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48595 8476 CVE-2011-1546 http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html  View
48596 8476 CVE-2011-1546 8168  View
48597 8476 CVE-2011-1546 8172  View
48598 8476 CVE-2011-1546 17084  View
48599 8476 CVE-2011-1546 20110330 "Andy"s PHP Knowledgebase" SQL Injection Vulnerability (CVE-2011-1546)  View
48600 8476 CVE-2011-1546 47097  View
48601 8476 CVE-2011-1546 http://www.uncompiled.com/2011/03/cve-2011-1546/  View
48602 8476 CVE-2011-1546 ADV-2011-0802  View
48603 8476 CVE-2011-1546 aphpkb-aviewusers-sql-injection(66500)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34191 JVNDB-2011-004433 Aphpkb における SQL インジェクションの脆弱性 Andy"s PHP Knowledgebase (Aphpkb) には、SQL インジェクションの脆弱性が存在します。 CVE-2011-1546 49453 CVE-2011-1546 8476 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004433.html 2011-03-16 2012-03-27 View