CVEvulnerability
CVE-2009-1787
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attackers to bypass authentication and gain administrative access via the (1) username and (2) password parameters.
Affected configurations
• phpdirsubmit php dir submit
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/35125 secunia.com
- http://www.securityfocus.com/bid/35003 Exploit
- http://www.vupen.com/english/advisories/2009/1365 www.vupen.com
- https://www.exploit-db.com/exploits/8710 www.exploit-db.com
- http://secunia.com/advisories/35125 secunia.com
- http://www.securityfocus.com/bid/35003 Exploit
- http://www.vupen.com/english/advisories/2009/1365 www.vupen.com
- https://www.exploit-db.com/exploits/8710 www.exploit-db.com