CVEvulnerability
CVE-2008-6274
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-02-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the logmbr parameter (aka login field) or (2) the mdpmbr parameter (aka pass or "Mot de passe" field). NOTE: some of these details are obtained from third party information.
Affected configurations
• mjcreation familyproject 2.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/50314 osvdb.org
- http://secunia.com/advisories/32900 Vendor Advisory
- http://www.securityfocus.com/bid/32501 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46929 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7248 www.exploit-db.com
- http://osvdb.org/50314 osvdb.org
- http://secunia.com/advisories/32900 Vendor Advisory
- http://www.securityfocus.com/bid/32501 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46929 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7248 www.exploit-db.com