Lucene search
+L

3 matches found

NVD
NVD
•added 2009/05/01 6:30 p.m.•27 views

CVE-2009-1508

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

7.5CVSS8.2AI score0.02031EPSS
SaveExploits2References3
CVE
CVE
•added 2009/05/01 6:00 p.m.•55 views

CVE-2009-1508

CVE-2009-1508 affects X-Forum 0.6.2. The vulnerability is an SQL injection in the function xforum_validateUser in Common.php , allowing remote attackers to execute arbitrary SQL commands via the cookie_username parameter to Configure.php. The NVD entry and related records confirm the issue and im...

7.5CVSS8.5AI score0.02031EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/01 12:00 a.m.•4 views

CVE-2009-1508: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

7.5CVSS6.4AI score0.02031EPSS
SaveExploits2References2
Rows per page
Query Builder