CVE-2009-1026 - Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters

Published Mar 20, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.99%

Description

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://www.securityfocus.com/bid/34116
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/0732
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49259
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8209
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/34116		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/0732		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49259		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8209		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 20, 2009

Updated Aug 7, 2024

Reserved Mar 19, 2009

Link CVE-2009-1026

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1026

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1026