CVE-2009-0454

2009-02-0520:00:00

mitre

www.cve.org

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

41.9%

JSON

Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field. NOTE: some third parties report inability to verify this issue.

References

www.securityfocus.com/bid/33600

exchange.xforce.ibmcloud.com/vulnerabilities/48503

www.exploit-db.com/exploits/7970