CoreCVE
Back

HIGH

Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php

Published Jul 13, 2009

Description

Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Jul 13, 2009
Updated Aug 7, 2024
Reserved Jul 13, 2009
Link CVE-2009-2439

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 16, 2026
Link CVE-2009-2439

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Jul 13, 2009
Updated Aug 7, 2024
Link EUVD-2009-2434

GitHub

No data