Lucene search
HistoryApr 01, 2009 - 10:30 a.m.
CVE-2009-1208
cve-2009-1208
sql injection
auth2db
vulnerability
remote attackers
multibyte character encodings
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.9%
SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.
Related
openvas
openvas
Debian Security Advisory DSA 1757-1 (auth2db)
2009-04-06 00:00:00
Debian: Security Advisory (DSA-1757-1)
2009-04-06 00:00:00
prion
prion
Sql injection
2009-04-01 10:30:00
nessus
nessus
Debian DSA-1757-1 : auth2db - SQL injection
2009-03-30 00:00:00
ubuntucve
ubuntucve
CVE-2009-1208
2009-04-01 00:00:00
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.9%
Related for CVE-2009-1208