Lucene search

K
cve[email protected]CVE-2009-4731
HistoryMar 18, 2010 - 6:30 p.m.

CVE-2009-4731

2010-03-1818:30:00
CWE-89
web.nvd.nist.gov
26
cve-2009-4731
sql injection
model agency manager pro
remote attacks
arbitrary sql commands

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.3%

SQL injection vulnerability in photos.php in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allows remote attackers to execute arbitrary SQL commands via the album parameter.

Affected configurations

NVD
Node
boldfxmodel_agency_manager_pro

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.3%

Related for CVE-2009-4731