CVE-2008-0371 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-0371
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0371

Description: Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via (2) the id parameter to (b) inc/usercp.php, related to functionz/usercp.php; or (3) the username parameter to (c) admin/index.php, related to functionz/first_process.php, or (d) index.php. NOTE: some of these details are obtained from third party information.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39735 http://xforce.iss.net/xforce/xfdb/39745 http://xforce.iss.net/xforce/xfdb/39733 http://xforce.iss.net/xforce/xfdb/39736 SAID Secunia Advisory: SA28515 MILW0RM http://www.milw0rm.com/exploits/4922 BID 27315

Return to the previous page.