CVE-2009-2366

EUVD-2009-2362
SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) p_password parameter in 1.5.  NOTE: some of these details are obtained from third party information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
datachecknhforumpal
1.5
datachecknhforumpal_fe
1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/35589
http://secunia.com/advisories/35603
http://www.exploit-db.com/exploits/9024
http://www.osvdb.org/55496
http://www.osvdb.org/55497
https://exchange.xforce.ibmcloud.com/vulnerabilities/51403
http://secunia.com/advisories/35589
http://secunia.com/advisories/35603
http://www.exploit-db.com/exploits/9024
http://www.osvdb.org/55496
http://www.osvdb.org/55497
https://exchange.xforce.ibmcloud.com/vulnerabilities/51403