CVE-2009-0452 - Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter

Back Back to CVE browser

MEDIUM

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter

Published Feb 5, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 1.94%

Description

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

http://osvdb.org/51712
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33767
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33576
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0456
Advisory
https://www.exploit-db.com/exploits/7956
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/51712		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33767		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33576		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0456		Advisory
https://www.exploit-db.com/exploits/7956		exploitx_refsource_EXPLOIT-DB