CVE-2009-1813

Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field).

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.31% chance of exploitation in the next 30 days, 82th percentile

Published

2009-05-29

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8683

References

• CVE Record
• NVD entry

Related

• CVE-2009-1812
• CVE-2009-1814
• CVE-2009-1811
• CVE-2009-1815
• CVE-2009-1810
• CVE-2009-1816