CVE-2009-0646

Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password…

published February 18, 2009

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password parameters to pcgi/4site.pl, (3) page parameter to print/print.shtml, (4) s and (5) i parameters to portfolio/index.shtml, (6) h parameter to hotel/index.php, (7) id parameter to news/news1.shtml, and the (8) th parameter to faq/index.shtml.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03597 · 89.4th percentile
Published
2009-02-18T23:00Z
EPSS history
Timeline
  • 18 FEB 23:00Z
    Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password…
    cvelistv5