CVE-2009-4689 in PHP Shopping Cart Selling Website Script

Sumário

de MITRE

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 10/03/2010
• Divulgação: 10/03/2010
• Moderação: aceite
• Entrada: VDB-52134
• CPE: pronto
• CWE: CWE-89 (confirmado)
• Exploração: Descarregar
• CVSS: 7.5 (NVD)
• EPSS: 0.00303
• KEV: não
• Atividades: muito baixo
• Sector: Education, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-4689
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-4689
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-4689/