CVEvulnerability
CVE-2009-0458
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field). NOTE: some of these details are obtained from third party information.
Affected configurations
• wholehogsoftware ware support 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/51733 osvdb.org
- http://secunia.com/advisories/33777 Vendor Advisory
- http://www.securityfocus.com/bid/33564 Exploit
- https://www.exploit-db.com/exploits/7940 www.exploit-db.com
- http://osvdb.org/51733 osvdb.org
- http://secunia.com/advisories/33777 Vendor Advisory
- http://www.securityfocus.com/bid/33564 Exploit
- https://www.exploit-db.com/exploits/7940 www.exploit-db.com