CVEvulnerability
CVE-2009-2113
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php.
Affected configurations
• fretsweb project fretsweb 1.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/55167 Broken Link
- http://osvdb.org/55168 Broken Link
- http://secunia.com/advisories/35492 Vendor Advisory
- http://sourceforge.net/forum/forum.php?forum_id=966939 Patch
- https://www.exploit-db.com/exploits/8980 Third Party Advisory, VDB Entry
- http://osvdb.org/55167 Broken Link
- http://osvdb.org/55168 Broken Link
- http://secunia.com/advisories/35492 Vendor Advisory
- http://sourceforge.net/forum/forum.php?forum_id=966939 Patch
- https://www.exploit-db.com/exploits/8980 Third Party Advisory, VDB Entry