CVE-2009-3116

CVE-2009-3116 is a SQL injection in the Uiga Church Portal, affecting the index.php calendar action where the year parameter can be manipulated to execute arbitrary SQL. The vulnerability is remote-exploitable with high impact (CVSS v2 base 7.5; Confidentiality, Integrity, and Availability partia...

CVE-2009-3116

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action...

CVE-2009-3116

creationtimestamp| type| source ---|---|--- 2009-08-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9535...