Lucene search
MitreCVE-2009-4862HistoryMay 11, 2010 - 12:02 p.m.
CVE-2009-4862
2010-05-1112:02:09
CWE-89
mitre
web.nvd.nist.gov
25
cve-2009-4862
alwasel
sql injection
show.php
xml.php
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
Low
EPSS
0.001
Percentile
43.7%
Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) show.php and (2) xml.php.
Affected configurations
Node
abushhabalwaselMatch1.5
Related
cvelist
cvelist
CVE-2009-4862
2010-05-10 20:00:00
nvd
nvd
CVE-2009-4862
2010-05-11 12:02:09
prion
prion
Sql injection
2010-05-11 12:02:00
exploitdb
exploitdb
Alwasel 1.5 - Multiple SQL Injections
2009-08-07 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
Low
EPSS
0.001
Percentile
43.7%
Related for CVE-2009-4862