CVEvulnerability
CVE-2009-4936
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-07-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to the default URI in an rss .xml action, or the id parameter to (2) pag1.php, (3) pag1-guest.php, (4) rss-comment_post.php (aka rss-coment_post.php), or (5) rss-pic-comment.php.
Affected configurations
• spirate small pirate 2.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/54784 osvdb.org
- http://osvdb.org/54785 Exploit
- http://osvdb.org/54786 Exploit
- http://osvdb.org/54787 Exploit
- http://osvdb.org/54788 Exploit
- http://secunia.com/advisories/35272 Vendor Advisory
- http://www.exploit-db.com/exploits/8819 www.exploit-db.com
- http://www.securityfocus.com/archive/1/503863/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50837 exchange.xforce.ibmcloud.com
- http://osvdb.org/54784 osvdb.org
- http://osvdb.org/54785 Exploit
- http://osvdb.org/54786 Exploit
- http://osvdb.org/54787 Exploit
- http://osvdb.org/54788 Exploit
- http://secunia.com/advisories/35272 Vendor Advisory
- http://www.exploit-db.com/exploits/8819 www.exploit-db.com
- http://www.securityfocus.com/archive/1/503863/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50837 exchange.xforce.ibmcloud.com