NVD

Id
51815  
Name
CVE-2009-4698  
Description
Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2010-03-15  
Modified Date
2010-03-17  
Seq
2009-4698  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262373 51815 CVE-2009-4698 9249  View
262374 51815 CVE-2009-4698 9261  View
262375 51815 CVE-2009-4698 35820  View
262376 51815 CVE-2009-4698 celepar-aviso-sql-injection(51985)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37896 JVNDB-2010-003681 XOOPS Celepar の Qas モジュールにおける SQL インジェクションの脆弱性 XOOPS Celepar の Qas モジュールは、SQL インジェクションの脆弱性が存在します。 CVE-2009-4698 42129 CVE-2009-4698 51815 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003681.html 2010-03-15 2012-06-26 View