CVE-2008-0385 in Urulu
Summary
SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with (1) statprt/js/request or (2) dyn/js/request in the PATH_INFO.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/22/2008
Disclosure
02/29/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 41291 | Urulu sql injection | 89 | Not defined | Not defined | CVE-2008-0385 |