NVD

Id
47975  
Name
CVE-2009-0646  
Description
Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password parameters to pcgi/4site.pl, (3) page parameter to print/print.shtml, (4) s and (5) i parameters to portfolio/index.shtml, (6) h parameter to hotel/index.php, (7) id parameter to news/news1.shtml, and the (8) th parameter to faq/index.shtml.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-02-18  
Modified Date
2010-11-06  
Seq
2009-0646  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240518 47975 CVE-2009-0646 http://wsec.ru/wsec-09-002-4site-cms-26-multiple-sql-injections/  View
240519 47975 CVE-2009-0646 http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html  View
240520 47975 CVE-2009-0646 7964  View
240521 47975 CVE-2009-0646 20101019 SQL Injection in 4site CMS  View
240522 47975 CVE-2009-0646 33594  View
240523 47975 CVE-2009-0646 4sitecms-pages-sql-injection(48483)  View
240524 47975 CVE-2009-0646 4sitecms-hotels-sql-injection(48486)  View
240525 47975 CVE-2009-0646 4sitecms-news-sql-injection(48487)  View
240526 47975 CVE-2009-0646 4sitecms-faq-sql-injection(48488)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42248 JVNDB-2009-003255 4Site CMS における SQL インジェクションの脆弱性 4Site CMS には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0646 38077 CVE-2009-0646 47975 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003255.html 2009-02-18 2012-06-26 View