CVE-2009-2786

SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.01% chance of exploitation in the next 30 days, 61th percentile

Published

2009-08-17

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/9289

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9289

References

• CVE Record
• NVD entry

Related

• CVE-2009-2784
• CVE-2009-2787
• CVE-2009-2783
• CVE-2009-2788
• CVE-2009-2782
• CVE-2009-2790