Back to search
CVE-2008-0385
Published: Feb 29, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with (1) statprt/js/request or (2) dyn/js/request in the PATH_INFO.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.csnc.ch/misc/files/advisories/CVE-2008-0385.txt
x_refsource_MISC
3707
third-party-advisory
x_refsource_SREASON
29162
third-party-advisory
x_refsource_SECUNIA
20080228 Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385)
mailing-list
x_refsource_BUGTRAQ
28032
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now