CVE-2009-2921 - Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) newsuser parameter (User field) and (2) newspassword parameter (Password field)

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) newsuser parameter (User field) and (2) newspassword parameter (Password field)

Published Aug 21, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.15%

Description

Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) newsuser parameter (User field) and (2) newspassword parameter (Password field).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://www.exploit-db.com/exploits/9353
exploitx_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2009/2161
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2909
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52231
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.exploit-db.com/exploits/9353		exploitx_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2009/2161		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2909		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52231		vdb-entryx_refsource_XF