2 matches found
CVE-2009-2883
SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...
8.3AI score0.00903EPSS
SaveExploits2References3
CVE-2009-2883: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...
6.8CVSS6.5AI score0.00903EPSS
SaveExploits2References2
20