CVEvulnerability
CVE-2009-4798
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and the (2) brugerid and (3) password fields to the administration login feature.
Affected configurations
• diskos diskos cms 6
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/34540 Vendor Advisory
- http://www.exploit-db.com/exploits/8307 www.exploit-db.com
- http://www.securityfocus.com/bid/34289 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49509 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49510 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/34540 Vendor Advisory
- http://www.exploit-db.com/exploits/8307 www.exploit-db.com
- http://www.securityfocus.com/bid/34289 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49509 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49510 exchange.xforce.ibmcloud.com