CVE-2009-0332

EUVD-2009-0336
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/edit.php, (2) admin/add.php, (3) lib/book_search.php, and possibly other components.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
avbooklibraryavbooklibrary
𝑥
≤ 1.0.2
avbooklibraryavbooklibrary
1.0.0
avbooklibraryavbooklibrary
1.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/33583
http://sourceforge.net/project/shownotes.php?release_id=654214
http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816
https://exchange.xforce.ibmcloud.com/vulnerabilities/48084
http://secunia.com/advisories/33583
http://sourceforge.net/project/shownotes.php?release_id=654214
http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816
https://exchange.xforce.ibmcloud.com/vulnerabilities/48084