CVE-2009-3205

2009-09-1617:00:00

mitre

www.cve.org

AI Score

8.3

Confidence

Low

EPSS

0.001

Percentile

27.8%

JSON

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_product action.

References

osvdb.org/57161

packetstormsecurity.org/0908-exploits/cbauthority-sql.txt

secunia.com/advisories/36345

exchange.xforce.ibmcloud.com/vulnerabilities/52547