CVE-2009-2276

SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.92% chance of exploitation in the next 30 days, 58th percentile

Published

2009-07-01

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/9058

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9058

References

• CVE Record
• NVD entry

Related

• CVE-2009-2275
• CVE-2009-2285
• CVE-2009-2269
• CVE-2009-2286
• CVE-2009-2267
• CVE-2009-2288