CVEvulnerability
CVE-2009-2786
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter.
Affected configurations
• reputation reputation (<= 2.2.4)
• reputation reputation 2.0.4
• reputation reputation 2.2.3
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/56612 osvdb.org
- http://secunia.com/advisories/36020 Vendor Advisory
- http://www.exploit-db.com/exploits/9289 www.exploit-db.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52088 exchange.xforce.ibmcloud.com
- http://osvdb.org/56612 osvdb.org
- http://secunia.com/advisories/36020 Vendor Advisory
- http://www.exploit-db.com/exploits/9289 www.exploit-db.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52088 exchange.xforce.ibmcloud.com