CVE-2009-4719 - SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter

HIGH

SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter

Published Mar 18, 2010

7.5

HIGH

CVSS 2.0

EPSS 1.04%

SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://www.exploit-db.com/exploits/9349		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/archive/1/505478/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/35923		vdb-entryx_refsource_BIDPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4683		Advisory