CVE-2009-1208

SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string…

published April 1, 2009

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01955 · 80.1th percentile
Published
2009-04-01T10:00Z
EPSS history
Timeline
  • 01 APR 10:00Z
    SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string…
    cvelistv5