Lucene search
HistoryJul 09, 2009 - 4:30 p.m.
CVE-2009-2394
cve-2009-2394
sql injection
smspages 1.0
mr.saphp arabic script mobile
messages library
catid parameter
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.4%
SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.
Affected configurations
Node
smspagessmspagesMatch1.0
mr_saphp_arabic_mobilemessages_libraryMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| smspages:smspages | smspages | eq | 1.0 |
References
Related
nvd
nvd
CVE-2009-2394
2009-07-09 16:30:00
cvelist
cvelist
CVE-2009-2394
2009-07-09 16:00:00
prion
prion
Sql injection
2009-07-09 16:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.4%
Related for CVE-2009-2394