Lucene search

PRIOn knowledge basePRION:CVE-2009-4698

HistoryMar 15, 2010 - 9:30 p.m.

Sql injection

2010-03-1521:30:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.3%

JSON

Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php.

CPENameOperatorVersion
xoops_celepareq1.0.1

CPE	Name	Operator	Version
	xoops_celepar	eq	1.0.1

References

osvdb.org/56593

osvdb.org/56595

secunia.com/advisories/35966

www.osvdb.org/56594

www.securityfocus.com/bid/35820

exchange.xforce.ibmcloud.com/vulnerabilities/51985

www.exploit-db.com/exploits/9249

www.exploit-db.com/exploits/9261