3 matches found
CVE-2009-2388
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
6.8CVSS8.5AI score0.00831EPSS
SaveExploits2References1
CVE-2009-2388
CVE-2009-2388 describes an SQL injection in Opial 1.0: admin/index.php, vulnerable via the txtPassword parameter, enabling remote execution of arbitrary SQL commands. The root cause is unsanitized input in this parameter. Practical impact stated is remote command execution with partial confidenti...
6.8CVSS8.3AI score0.00831EPSS
SaveExploits2References2Affected Software1
20