CVE-2009-4862 - Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) show.php and (2) xml.php

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) show.php and (2) xml.php

Published May 10, 2010

7.5

HIGH

CVSS 2.0

EPSS 0.93%

Description

Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) show.php and (2) xml.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

http://www.exploit-db.com/exploits/9384
exploitx_refsource_EXPLOIT-DB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4825
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52326
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.exploit-db.com/exploits/9384		exploitx_refsource_EXPLOIT-DB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4825		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52326		vdb-entryx_refsource_XF