3 matches found
CVE-2009-0739
SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd parameters...
7.5CVSS8.4AI score0.01084EPSS
SaveExploits2References2
CVE-2009-0739
CVE-2009-0739 affects the MyNews 0.10 web application, specifically the login.php component. The vulnerability is a SQL injection in the authentication path, exploitable through the parameters (1) username and (2) passwd, enabling remote attackers to execute arbitrary SQL commands. The CVSS metri...
7.5CVSS8.7AI score0.01084EPSS
SaveExploits2References2Affected Software1
20