CVE-2009-1024

Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-03-20

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Phplinkadmin (Beerwin)

References

• http://osvdb.org/52778
• http://secunia.com/advisories/34323
• http://www.securityfocus.com/bid/34129
• http://www.vupen.com/english/advisories/2009/0733
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49265
• https://www.exploit-db.com/exploits/8216