{"id": "CVE-2009-1277", "bulletinFamily": "NVD", "title": "CVE-2009-1277", "description": "SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.", "published": "2009-04-09T12:27:53", "modified": "2017-09-28T21:34:16", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1277", "reporter": "NVD", "references": ["http://www.securityfocus.com/bid/34370", "https://exchange.xforce.ibmcloud.com/vulnerabilities/49678", "https://www.exploit-db.com/exploits/8350"], "cvelist": ["CVE-2009-1277"], "type": "cve", "lastseen": "2017-09-29T14:26:34", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:gravityboardx:gravity_board_x:2.0:beta"], "cvelist": ["CVE-2009-1277"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.", "edition": 2, "enchantments": {}, "hash": "d6c6d879ae88cc68f20d9542108b007e386699fb7b6f4e649d0097d1b58357c6", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "1b90ef70c26d64cd19ba7787ce28d422", "key": "title"}, {"hash": "c38a8476207fa933f013330f162ebfaa", "key": "modified"}, {"hash": "749894ccda6ecd6fe0990fe0cf407f73", "key": "references"}, {"hash": "f3df3f77865802b46d5039a2111812c9", "key": "cvelist"}, {"hash": "e9743c276f6fa38165e87e26767d9471", "key": "href"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "2e9f238dee078be91bd1dc45d8a5417b", "key": "description"}, {"hash": "345685c8211268763a7d0b57e2d06faa", "key": "published"}, {"hash": "adcbf9b64c7f82b2b25ddb67c5d9efcc", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1277", "id": "CVE-2009-1277", "lastseen": "2017-08-17T11:14:18", "modified": "2017-08-16T21:30:16", "objectVersion": "1.3", "published": "2009-04-09T12:27:53", "references": ["http://www.milw0rm.com/exploits/8350", "http://www.securityfocus.com/bid/34370", "https://exchange.xforce.ibmcloud.com/vulnerabilities/49678"], "reporter": "NVD", "scanner": [], "title": "CVE-2009-1277", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 2, "lastseen": "2017-08-17T11:14:18"}, {"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:gravityboardx:gravity_board_x:2.0:beta"], "cvelist": ["CVE-2009-1277"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.", "edition": 1, "enchantments": {}, "hash": "378180f38e8f7e0004bdbd2f0b455900d52cfc2fe2a161bc016dee6c4da2e5a6", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "1b90ef70c26d64cd19ba7787ce28d422", "key": "title"}, {"hash": "6329ac8279cae5bfcddc017646407c37", "key": "references"}, {"hash": "f3df3f77865802b46d5039a2111812c9", "key": "cvelist"}, {"hash": "e9743c276f6fa38165e87e26767d9471", "key": "href"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "441cd946ad6d6710f6ff5e5e3f896a71", "key": "modified"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "2e9f238dee078be91bd1dc45d8a5417b", "key": "description"}, {"hash": "345685c8211268763a7d0b57e2d06faa", "key": "published"}, {"hash": "adcbf9b64c7f82b2b25ddb67c5d9efcc", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1277", "id": "CVE-2009-1277", "lastseen": "2016-09-03T12:17:35", "modified": "2009-04-09T00:00:00", "objectVersion": "1.2", "published": "2009-04-09T12:27:53", "references": ["http://www.milw0rm.com/exploits/8350", "http://www.securityfocus.com/bid/34370", "http://xforce.iss.net/xforce/xfdb/49678"], "reporter": "NVD", "scanner": [], "title": "CVE-2009-1277", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T12:17:35"}], "edition": 3, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "adcbf9b64c7f82b2b25ddb67c5d9efcc"}, {"key": "cvelist", "hash": "f3df3f77865802b46d5039a2111812c9"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "2e9f238dee078be91bd1dc45d8a5417b"}, {"key": "href", "hash": "e9743c276f6fa38165e87e26767d9471"}, {"key": "modified", "hash": "0950d08c2e3957885c882cb000176e53"}, {"key": "published", "hash": "345685c8211268763a7d0b57e2d06faa"}, {"key": "references", "hash": "c25edccacc367b1e0fe417006007cc74"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "1b90ef70c26d64cd19ba7787ce28d422"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "ef1962f02308bd96a09c2beb414eeb590119951103fddafeb1dce429c38f7597", "viewCount": 0, "enchantments": {"vulnersScore": 7.7}, "objectVersion": "1.3", "cpe": ["cpe:/a:gravityboardx:gravity_board_x:2.0:beta"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"result": {"openvas": [{"id": "OPENVAS:1361412562310100101", "type": "openvas", "title": "Gravity Board X Multiple SQL Injection Vulnerabilities and Remote Command Execution Vulnerability", "description": "Gravity Board X is prone to multiple SQL-injection vulnerabilities\n and a remote command-execution because it fails to sufficiently\n sanitize user-supplied data before using it in an SQL query.\n\n Exploiting these issues could allow an attacker to execute arbitrary\n code, compromise the application. access or modify data, or exploit\n latent vulnerabilities in the underlying database.\n\n Gravity Board X 2.0 is vulnerable; other versions may also be\n affected.", "published": "2009-04-05T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310100101", "cvelist": ["CVE-2009-1277"], "lastseen": "2018-04-11T11:46:21"}, {"id": "OPENVAS:100101", "type": "openvas", "title": "Gravity Board X Multiple SQL Injection Vulnerabilities and Remote Command Execution Vulnerability", "description": "Gravity Board X is prone to multiple SQL-injection vulnerabilities\n and a remote command-execution because it fails to sufficiently\n sanitize user-supplied data before using it in an SQL query.\n\n Exploiting these issues could allow an attacker to execute arbitrary\n code, compromise the application. access or modify data, or exploit\n latent vulnerabilities in the underlying database.\n\n Gravity Board X 2.0 is vulnerable; other versions may also be\n affected.", "published": "2009-04-05T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=100101", "cvelist": ["CVE-2009-1277"], "lastseen": "2017-07-02T21:14:10"}, {"id": "OPENVAS:1361412562310100115", "type": "openvas", "title": "ConnX 'frmLoginPwdReminderPopup.aspx' SQL Injection Vulnerability", "description": "ConnX is prone to an unspecified SQL-injection vulnerability because it fails\nto sufficiently sanitize user-supplied data before using it in a SQL query.", "published": "2009-04-08T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310100115", "cvelist": ["CVE-2009-1277"], "lastseen": "2018-02-14T19:09:15"}], "exploitdb": [{"id": "EDB-ID:8350", "type": "exploitdb", "title": "Gravity Board X 2.0b SQL Injection / Post Auth Code Execution", "description": "Gravity Board X 2.0b SQL Injection / Post Auth Code Execution. CVE-2008-2996,CVE-2009-1277,CVE-2009-1278. Webapps exploit for php platform", "published": "2009-04-03T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/8350/", "cvelist": ["CVE-2009-1277", "CVE-2008-2996", "CVE-2009-1278"], "lastseen": "2016-02-01T04:19:15"}, {"id": "EDB-ID:5791", "type": "exploitdb", "title": "gravity board x 2.0 beta sql/XSS Multiple Vulnerabilities", "description": "Gravity Board X 2.0 Beta (SQL/XSS) Multiple Remote Vulnerabilities. CVE-2008-2996,CVE-2008-2997,CVE-2009-1277. Webapps exploit for php platform", "published": "2008-06-12T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/5791/", "cvelist": ["CVE-2009-1277", "CVE-2008-2997", "CVE-2008-2996"], "lastseen": "2016-01-31T23:34:25"}]}}