3 matches found
EUVD-2009-2873
Malware in sbrugna...
6.8CVSS6.4AI score0.00903EPSS
SaveExploits2References4
Sql injection
SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...
6.8CVSS9.1AI score0.00903EPSS
SaveExploits2References3Affected Software1
CVE-2009-2883
SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...
8.3AI score0.00903EPSS
SaveExploits2References3
20