Lucene search
MitreCVELIST:CVE-2009-1038HistoryMar 20, 2009 - 6:00 p.m.
CVE-2009-1038
2009-03-2018:00:00
mitre
www.cve.org
3
Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) user parameter in a modif action to admin/index.php.
Related
exploitdb
exploitdb
YAP 1.1.1 - Blind SQL Injection / SQL Injection
2009-03-16 00:00:00
YAP 1.1.1 - 'index.php' Local File Inclusion
2009-03-13 00:00:00
prion
prion
Sql injection
2009-03-20 18:30:00
nvd
nvd
CVE-2009-1038
2009-03-20 18:30:00
openvas
openvas
YAP Multiple SQL Injection Vulnerabilities
2009-03-29 00:00:00
Yap Blog <= 1.1.1 Multiple SQLi Vulnerabilities - Active Check
2009-03-29 00:00:00
cve
cve
CVE-2009-1038
2009-03-20 18:30:00