CVE-2009-1508

SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as…

published May 1, 2009

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookie_username parameter to Configure.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02031 · 80.9th percentile
Published
2009-05-01T18:00Z
EPSS history
Timeline
  • 01 MAY 18:00Z
    SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as…
    cvelistv5