Lucene search
+L

5 matches found

NVD
NVD
•added 2009/04/29 6:30 p.m.•24 views

CVE-2009-1481

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...

7.5CVSS8AI score0.01173EPSS
SaveExploits1References5
Prion
Prion
•added 2009/04/29 6:30 p.m.•21 views

Sql injection

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...

7.5CVSS8.7AI score0.01173EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2009/04/29 6:06 p.m.•52 views

CVE-2009-1481

PuterJam's Blog (PJBlog3 ) version 3.0.6.170 contains an SQL injection vulnerability in the action.asp file. Remote attackers can execute arbitrary SQL commands by exploiting the cname parameter within the checkAlias action. This vulnerability was confirmed to have been exploited in the wild in A...

7.5CVSS8.3AI score0.01173EPSS
SaveIn wildExploits1References5Affected Software1
Cvelist
Cvelist
•added 2009/04/29 6:06 p.m.•33 views

CVE-2009-1481

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...

8AI score0.01173EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/29 12:00 a.m.•8 views

CVE-2009-1481: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...

7.5CVSS6.4AI score0.01173EPSS
SaveExploits1References2
Rows per page
Query Builder