CVE-2009-1481 - SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009

Back Back to CVE browser

HIGH

SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009

Published Apr 29, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.17%

Description

SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (6)

http://downloads.securityfocus.com/vulnerabilities/exploits/34701.vbs
x_refsource_MISCExploit
http://osvdb.org/53939
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34897
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34701
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1479
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50082
vdb-entryx_refsource_XF

Link	Providers	Tags
http://downloads.securityfocus.com/vulnerabilities/exploits/34701.vbs		x_refsource_MISCExploit
http://osvdb.org/53939		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34897		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34701		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1479		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50082		vdb-entryx_refsource_XF