CVE-2009-0279 - SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Jan 27, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.13%

Description

SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://www.securityfocus.com/bid/33404
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0284
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48175
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7851
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/33404		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0284		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48175		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7851		exploitx_refsource_EXPLOIT-DB