CVE-2009-0427

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
dmxreadymember_directory_manager
1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93
http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12
http://secunia.com/advisories/33482
http://www.securityfocus.com/bid/33253
https://exchange.xforce.ibmcloud.com/vulnerabilities/47960
https://www.exploit-db.com/exploits/7773
http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93
http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12
http://secunia.com/advisories/33482
http://www.securityfocus.com/bid/33253
https://exchange.xforce.ibmcloud.com/vulnerabilities/47960
https://www.exploit-db.com/exploits/7773