CVE-2009-2120

2009-06-1821:00:00

mitre

www.cve.org

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.8%

JSON

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access.