CVE-2008-2479 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-2479
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-2479

Description: Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and the (2) account parameter to auth/00_pass.php.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42637 http://xforce.iss.net/xforce/xfdb/42636 SAID Secunia Advisory: SA30397 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/492582/100/0/threaded BID 29371

Return to the previous page.