CVE-2009-2113

2009-06-1821:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.003

Percentile

69.2%

JSON

Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php.

References

osvdb.org/55167

osvdb.org/55168

secunia.com/advisories/35492

sourceforge.net/forum/forum.php?forum_id=966939

www.exploit-db.com/exploits/8980