CVE-2009-3117 - SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter

Published Sep 9, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.01%

Description

SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

http://secunia.com/advisories/36124
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9538
exploitx_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2009/2467
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3100
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52904
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/36124		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9538		exploitx_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2009/2467		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3100		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52904		vdb-entryx_refsource_XF