cvelist/2009/0xxx/CVE-2009-0402.json
2019-03-18 04:11:39 +00:00

87 lines
3.0 KiB
JSON

{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-0402",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, and (15) vat_num parameters."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "33496",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/33496"
},
{
"name": "domaintechnologie-newaccount-sql-injection(48292)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48292"
},
{
"name": "http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973",
"refsource": "CONFIRM",
"url": "http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973"
},
{
"name": "51631",
"refsource": "OSVDB",
"url": "http://osvdb.org/51631"
},
{
"name": "33698",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33698"
},
{
"name": "http://git.gplhost.com/gitweb/?p=dtc.git;a=commitdiff;h=056e1d1849ff3aa183a410e2aab1c1c3e969247d",
"refsource": "CONFIRM",
"url": "http://git.gplhost.com/gitweb/?p=dtc.git;a=commitdiff;h=056e1d1849ff3aa183a410e2aab1c1c3e969247d"
}
]
}
}