CVE-2009-2120

EUVD-2009-2116
Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors.  NOTE: vector 1 requires administrative access.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 29%
Affected Products (NVD)
VendorProductVersion
tekbasetekbase_all-in-one
3.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/55190
http://osvdb.org/55191
http://secunia.com/advisories/35481
https://www.exploit-db.com/exploits/8977
http://osvdb.org/55190
http://osvdb.org/55191
http://secunia.com/advisories/35481
https://www.exploit-db.com/exploits/8977