NVD

Id
49684  
Name
CVE-2009-2439  
Description
Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-07-13  
Modified Date
2010-02-13  
Seq
2009-2439  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251145 49684 CVE-2009-2439 http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt  View
251146 49684 CVE-2009-2439 ADV-2009-1838  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45153 JVNDB-2009-006160 Web Development House Alibaba Clone における SQL インジェクションの脆弱性 Web Development House Alibaba Clone には、SQL インジェクションの脆弱性が存在します。 CVE-2009-2439 39870 CVE-2009-2439 49684 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006160.html 2009-07-13 2012-12-20 View