CVE-2009-1814

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter

published May 29, 2009

CVSS
—
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00993 · 62.2th percentile
Published
2009-05-29T16:24Z
EPSS history
Timeline
  • 29 MAY 16:24Z
    SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter
    cvelistv5