Lucene search

K
cvelistMitreCVELIST:CVE-2009-4437
HistoryDec 28, 2009 - 6:27 p.m.

CVE-2009-4437

2009-12-2818:27:00
mitre
www.cve.org
1

AI Score

8.3

Confidence

Low

EPSS

0.007

Percentile

80.1%

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1.

AI Score

8.3

Confidence

Low

EPSS

0.007

Percentile

80.1%

Related for CVELIST:CVE-2009-4437