CVE-2009-3208

Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-09-16

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Phpfreebb (Prakashatma Mishra)

References

• http://packetstormsecurity.org/0908-exploits/phpfreebb-sql.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52550