Lucene search
+L

2 matches found

NVD
NVD
•added 2009/02/03 7:30 p.m.•28 views

CVE-2009-0409

SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

6.8CVSS8.4AI score0.01105EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/03 12:00 a.m.•3 views

CVE-2009-0409: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

6.8CVSS6.4AI score0.01105EPSS
SaveExploits2References2
Rows per page
Query Builder