CVE Database
/

CVE-2009-3259

Back to search

CVE-2009-3259

Published: Sep 18, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in RASH Quote Management System (RQMS) 1.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the search parameter in a search action, (2) the quote parameter in a quote addition, or (3) a User_Name cookie in unspecified administrative actions. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

VendorProductVersions

n/a

n/a

affected
n/a

References

57469
vdb-entry
x_refsource_OSVDB
57470
vdb-entry
x_refsource_OSVDB
57467
vdb-entry
x_refsource_OSVDB
rqms-search-sql-injection(52895)
vdb-entry
x_refsource_XF
36477
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now