CVE-2009-2927 - SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter

Published Aug 21, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.93%

Description

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

http://www.exploit-db.com/exploits/9440
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/52486
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.exploit-db.com/exploits/9440		exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/52486		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 21, 2009

Updated Aug 7, 2024

Reserved Aug 21, 2009

Link CVE-2009-2927

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2927

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-2927