CVE-2009-4798 | BDVDB-2026-41392 Detail

Description#

Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and the (2) brugerid and (3) password fields to the administration login feature.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.exploit-db.com/exploits/8307
http://www.securityfocus.com/bid/34289
https://exchange.xforce.ibmcloud.com/vulnerabilities/49509
https://exchange.xforce.ibmcloud.com/vulnerabilities/49510
http://secunia.com/advisories/34540

Exploit#

http://www.exploit-db.com/exploits/8307

History#

Version 12010-04-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.