CVE-2009-5091 - SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter

HIGH

SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Sep 9, 2011

7.5

HIGH

CVSS 2.0

EPSS 0.99%

SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://secunia.com/advisories/33931		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/8050		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/33766		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-5046		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48729		vdb-entryx_refsource_XF