CVE-2009-2891 - SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter

HIGH

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter

Published Aug 20, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.99%

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt		x_refsource_MISC
http://secunia.com/advisories/35932		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/56123		vdb-entryx_refsource_OSVDBExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2881		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51872		vdb-entryx_refsource_XF