NVD

Id
47664  
Name
CVE-2009-0332  
Description
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/edit.php, (2) admin/add.php, (3) lib/book_search.php, and possibly other components.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-01-29  
Modified Date
2009-01-30  
Seq
2009-0332  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238797 47664 CVE-2009-0332 http://sourceforge.net/project/shownotes.php?release_id=654214  View
238798 47664 CVE-2009-0332 http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816  View
238799 47664 CVE-2009-0332 avbook-edit-sql-injection(48084)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42193 JVNDB-2009-003200 AV Book Library における SQL インジェクションの脆弱性 AV Book Library には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0332 37763 CVE-2009-0332 47664 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003200.html 2009-01-29 2012-06-26 View