NVD

Id
51120  
Name
CVE-2009-3961  
Description
SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-11-17  
Modified Date
2009-11-24  
Seq
2009-3961  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259067 51120 CVE-2009-3961 http://code.google.com/p/superseriousstats/  View
259068 51120 CVE-2009-3961 ADV-2009-3175  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44112 JVNDB-2009-005119 Super Serious Stats の user.php における SQL インジェクションの脆弱性 Super Serious Stats の user.php には、"誤った regexp" に関連する処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2009-3961 41392 CVE-2009-3961 51120 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005119.html 2009-11-17 2012-09-25 View