CVE-2009-4689 in PHP Shopping Cart Selling Website Script

الملخص

بحسب MITRE

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 10/03/2010
• إفشاء: 10/03/2010
• الاعتدال: تمت الموافقة
• إدخال: VDB-52134
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• استغلال: تحميل
• CVSS: 7.5 (NVD)
• EPSS: 0.00303
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-4689
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-4689
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-4689/