CVE-2009-1813

Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field).
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Common Weakness Enumeration
References
http://osvdb.org/54475
http://secunia.com/advisories/35088
http://www.securityfocus.com/bid/34970
http://www.vupen.com/english/advisories/2009/1327
https://exchange.xforce.ibmcloud.com/vulnerabilities/50552
https://www.exploit-db.com/exploits/8683
http://osvdb.org/54475
http://secunia.com/advisories/35088
http://www.securityfocus.com/bid/34970
http://www.vupen.com/english/advisories/2009/1327
https://exchange.xforce.ibmcloud.com/vulnerabilities/50552
https://www.exploit-db.com/exploits/8683