Lucene search
+L

3 matches found

Prion
Prion
•added 2009/05/29 4:30 p.m.•28 views

Sql injection

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...

6CVSS8.9AI score0.00886EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2009/05/29 4:24 p.m.•40 views

CVE-2009-1812

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...

8.1AI score0.00886EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/29 12:00 a.m.•3 views

CVE-2009-1812: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...

6CVSS6.5AI score0.00886EPSS
SaveExploits2References2
Rows per page
Query Builder