CVE-2009-2276

SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*
OR cpe:2.3:a:biglle:vote_for_us_extension:1.0:*:*:*:*:*:*:*
cpe:2.3:a:biglle:vote_for_us_extension:*:*:*:*:*:*:*:*

Information

Published : 2009-07-01 06:00

Updated : 2017-09-18 18:29


NVD link : CVE-2009-2276

Mitre link : CVE-2009-2276


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

biglle

  • vote_for_us_extension

punbb

  • punbb