CoreCVE
Back

HIGH

SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters

Published Feb 25, 2009

Description

SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Feb 25, 2009
Updated Aug 7, 2024
Reserved Feb 25, 2009
Link CVE-2009-0739

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 16, 2026
Link CVE-2009-0739

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Feb 25, 2009
Updated Aug 7, 2024
Link EUVD-2009-0739

GitHub

No data