SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL commands via the mesajid parameter.
References
Link | Resource |
---|---|
http://secunia.com/advisories/35290 | Vendor Advisory |
https://www.exploit-db.com/exploits/8859 |
Configurations
Information
Published : 2009-06-05 14:30
Updated : 2017-09-28 18:34
NVD link : CVE-2009-1950
Mitre link : CVE-2009-1950
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
ahmet_donmez
- webeyes_guest_book