CVE-2009-2345

Опубликовано: 07 июл. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components.

Ссылки

http://secunia.com/advisories/35694
Vendor Advisory
http://www.clansphere.net/index/news/view/id/405/
http://www.securityfocus.com/bid/35576
Patch
http://www.vupen.com/english/advisories/2009/1794
Patch
Vendor Advisory
http://secunia.com/advisories/35694
Vendor Advisory
http://www.clansphere.net/index/news/view/id/405/
http://www.securityfocus.com/bid/35576
Patch
http://www.vupen.com/english/advisories/2009/1794
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:clansphere:clansphere:*:*:*:*:*:*:*:*

Версия до 2009.0 (включая)

cpe:2.3:a:clansphere:clansphere:2007.4:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2007.4.1:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2007.4.2:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2007.4.3:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2007.4.4:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2008:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2008.1:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2008.2:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2008.2.1:*:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2009.0:rc1:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2009.0:rc2:*:*:*:*:*:*

cpe:2.3:a:clansphere:clansphere:2009.0:rc3:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00397

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-x68x-ch2m-c24j

github

почти 4 года назад