CVE-2008-2652 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-2652
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-2652

Description: Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42811 SAID Secunia Advisory: SA30477 MILW0RM http://www.milw0rm.com/exploits/5725 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/493130/100/0/threaded BID 29496

Return to the previous page.