CVE-2009-2933

Опубликовано: 21 авг. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

Ссылки

http://secunia.com/advisories/36333
Vendor Advisory
http://www.securityfocus.com/archive/1/505801/100/0/threaded
http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf
URL Repurposed
http://secunia.com/advisories/36333
Vendor Advisory
http://www.securityfocus.com/archive/1/505801/100/0/threaded
http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf
URL Repurposed

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*

Версия до 2.0 (включая)

EPSS

Процентиль: 61%

0.00413

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2009-2933

ubuntu

больше 16 лет назад

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

CVE-2009-2933

debian

больше 16 лет назад

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 all ...

GHSA-c7j3-xxqh-xjh7

github

больше 3 лет назад

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

EPSS

Процентиль: 61%

0.00413

Низкий

7.5 High

CVSS2

Дефекты

CWE-89