CVE-2009-1245

Опубликовано: 06 апр. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the (1) subject, (2) language, and (3) nickname parameters to php/cccp-pages/submit.php. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:*:*:*:*:*:*:*:*

Версия до 2.70 (включая)

cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.10:*:*:*:*:*:*:*

cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.20:*:*:*:*:*:*:*

cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.30:*:*:*:*:*:*:*

cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.40:*:*:*:*:*:*:*

cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.50:*:*:*:*:*:*:*

cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.60:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00465

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-v9fc-m4v7-vch7

github

почти 4 года назад