CVE-2009-3436

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID…

published September 28, 2009

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID parameter. NOTE: this might overlap CVE-2005-1417.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Published
2009-09-28T22:00Z
EPSS history
Timeline
  • 28 SEP 22:00Z
    Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID…
    cvelistv5