CVE-2009-2113

Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.56% chance of exploitation in the next 30 days, 85th percentile

Published

2009-06-18

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8980

Security advisories

• http://secunia.com/advisories/35492
• http://sourceforge.net/forum/forum.php?forum_id=966939

References

• CVE Record
• NVD entry