Lucene search

K
cvelistMitreCVELIST:CVE-2009-1433
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2009-1433

2022-10-0316:23:59
mitre
www.cve.org
sql injection
silverstripe
file::find
file.php
remote attackers
execute
arbitrary sql commands
filename parameter

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.5%

SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter.

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.5%

Related for CVELIST:CVE-2009-1433