CVE-2009-3252 Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dave robinson rockbandcms | = 0.10 | No fix listed |
References
- 36517 third-party-advisory vendor-advisory
- 9553 exploit
- ADV-2009-2494 vdb-entry vendor-advisory
- bandcms-news-sql-injection(52940) vdb-entry