CVE-2009-4256

Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) cont_id and…

published December 10, 2009

CVSS
—
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) cont_id and (2) courc_id parameters in a pregled action. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00961 · 61.2th percentile
Published
2009-12-10T01:00Z
EPSS history
Timeline
  • 10 DEC 01:00Z
    Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) cont_id and…
    cvelistv5