← Voltar para CVEs
CVE-2009-2394
N/ADescricao
SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado7/9/2009
Ultima modificacao4/23/2026
Fontenvd
Avistamentos honeypot0
Produtos afetados
mr_saphp_arabic_mobile:messages_librarysmspages:smspages
Fraquezas (CWE)
CWE-89
Referencias
http://www.exploit-db.com/exploits/9027(cve@mitre.org)
http://www.exploit-db.com/exploits/9027(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.