CVE-2009-4982 in Irokez CMS

Resumen (Inglés)

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to the default URI.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2010-08-25

Divulgación

2010-08-25

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
54483	Irokez Irokez CMS select inyección SQL	89	Prueba de concepto	No está definido	CVE-2009-4982

Fuentes

• MITRE
• NVD
• CVE Details