CVE-2009-1742

code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are…

published May 20, 2009

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" by the filter_sql function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01340 · 71.1th percentile
Published
2009-05-20T19:00Z
EPSS history
Timeline
  • 20 MAY 19:00Z
    code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are…
    cvelistv5