CVE-2009-2366 | BDVDB-2026-37339 Detail

Description#

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) p_password parameter in 1.5. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/55497
https://exchange.xforce.ibmcloud.com/vulnerabilities/51403
http://secunia.com/advisories/35603
http://www.osvdb.org/55496
http://www.exploit-db.com/exploits/9024
http://secunia.com/advisories/35589

Exploit#

http://www.exploit-db.com/exploits/9024

History#

Version 12009-07-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.