CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2009/07/10 5:30 p.m.•33 views

CVE-2009-2428

Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to suchauftraegeuser.php and the 2 descr parameter to vote.php; and other unspecified vectors...

7.5CVSS8.5AI score0.00969EPSS

SaveExploits3References3

Prion•added 2009/07/10 5:30 p.m.•23 views

Sql injection

7.5CVSS9.3AI score0.00969EPSS

SaveExploits3References3Affected Software1

CVE•added 2009/07/10 5:00 p.m.•53 views

CVE-2009-2428

The CVE-2009-2428 entry concerns the Tausch Ticket Script 3 with multiple SQL injection vulnerabilities. The documented vectors include the (1) userid parameter to suchauftraege_user.php and the (2) descr parameter to vote.php, plus other unspecified vectors. Attack potential is remote, enabling ...

7.5CVSS8.8AI score0.00969EPSS

SaveExploits3References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2009/07/10 12:00 a.m.•6 views

CVE-2009-2428: Improper Neutralization of Special Elements used in an SQL Command

7.5CVSS6.4AI score0.00969EPSS

SaveExploits3References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by