CVEvulnerability
CVE-2009-4698
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-03-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php.
Affected configurations
• alexandre amaral xoops celepar 1.0.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/56593 osvdb.org
- http://osvdb.org/56595 osvdb.org
- http://secunia.com/advisories/35966 Vendor Advisory
- http://www.exploit-db.com/exploits/9249 www.exploit-db.com
- http://www.exploit-db.com/exploits/9261 www.exploit-db.com
- http://www.osvdb.org/56594 www.osvdb.org
- http://www.securityfocus.com/bid/35820 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51985 exchange.xforce.ibmcloud.com
- http://osvdb.org/56593 osvdb.org
- http://osvdb.org/56595 osvdb.org
- http://secunia.com/advisories/35966 Vendor Advisory
- http://www.exploit-db.com/exploits/9249 www.exploit-db.com
- http://www.exploit-db.com/exploits/9261 www.exploit-db.com
- http://www.osvdb.org/56594 www.osvdb.org
- http://www.securityfocus.com/bid/35820 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51985 exchange.xforce.ibmcloud.com