CVE-2009-2021 - SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter

HIGH

SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter

Published Jun 9, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.01%

SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

http://secunia.com/advisories/35376
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2009/1525
vdb-entryx_refsource_VUPENVendor Advisory
https://www.exploit-db.com/exploits/8892
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/35376		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2009/1525		vdb-entryx_refsource_VUPENVendor Advisory
https://www.exploit-db.com/exploits/8892		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 9, 2009

Updated Aug 7, 2024

Reserved Jun 9, 2009

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a