CVE-2009-4669 | BDVDB-2026-40551 Detail

Description#

Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the loginus parameter to Login.php or (2) the Old Password field to changepwd.php, and allow (3) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/userform.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/35237
http://www.exploit-db.com/exploits/8797

Exploit#

http://www.exploit-db.com/exploits/8797

History#

Version 12010-03-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.