Sign in
CVE-2009-4733
CVE-2009-4733
Description
SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.
Impact
CVSS v2 : 6.8 MEDIUM
Type
CWE-89
Attack Vector
CVSSv2 Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P
Quick links
CVE
,
NVD
,
CERT
,
Metasploit
,
Exploit-db
,
Fulldisc
,
Bugtraq
,
Microsoft
,
Red Hat
,
Debian
, GitHub
code
/
issues
,
Google
References
http://www.exploit-db.com/exploits/9336
http://www.vupen.com/english/advisories/2009/2128
FAQ
Terms of service
Privacy policy