CVE Database
/

CVE-2009-2120

Back to search

CVE-2009-2120

Published: Jun 18, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access.

VendorProductVersions

n/a

n/a

affected
n/a

References

8977
exploit
x_refsource_EXPLOIT-DB
55190
vdb-entry
x_refsource_OSVDB
55191
vdb-entry
x_refsource_OSVDB
35481
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now