CVE-2009-1731 - SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie

Back Back to CVE browser

HIGH

SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie

Published May 20, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.20%

Description

SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (6)

http://securityreason.com/exploitalert/6198
x_refsource_MISCExploit
http://www.sebug.net/exploit/11292/
x_refsource_MISCExploit
http://www.securityfocus.com/bid/34982
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/1308
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1726
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50526
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/exploitalert/6198		x_refsource_MISCExploit
http://www.sebug.net/exploit/11292/		x_refsource_MISCExploit
http://www.securityfocus.com/bid/34982		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/1308		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1726		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50526		vdb-entryx_refsource_XF