CVE-2009-4982 in Irokez CMSinfo

Summary

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to the default URI.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

08/25/2010

Disclosure

08/25/2010

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Interested in the pricing of exploits?

See the underground prices here!