CVE-2009-2394

SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.92% chance of exploitation in the next 30 days, 58th percentile

Published

2009-07-09

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/9027

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9027

References

• CVE Record
• NVD entry

Related

• CVE-2009-2393
• CVE-2009-2395
• CVE-2009-2392
• CVE-2009-2396
• CVE-2009-2391
• CVE-2009-2397