CVEvulnerability
CVE-2009-2366
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) p_password parameter in 1.5. NOTE: some of these details are obtained from third party information.
Affected configurations
• datachecknh forumpal 1.5
• datachecknh forumpal fe 1.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/35589 Vendor Advisory
- http://secunia.com/advisories/35603 Vendor Advisory
- http://www.exploit-db.com/exploits/9024 www.exploit-db.com
- http://www.osvdb.org/55496 Exploit
- http://www.osvdb.org/55497 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51403 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/35589 Vendor Advisory
- http://secunia.com/advisories/35603 Vendor Advisory
- http://www.exploit-db.com/exploits/9024 www.exploit-db.com
- http://www.osvdb.org/55496 Exploit
- http://www.osvdb.org/55497 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51403 exchange.xforce.ibmcloud.com