Skip to content

CVE-2009-4792 SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php.

HighCVSS 7.5 EPSS 0.99%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php.

Affected products

ProductAffected versionsFixed in
karl core bandsite cms = 1.1.4 No fix listed

References

  • 21992 third-party-advisory vendor-advisory
  • 8309 exploit
  • 34292 exploit vdb-entry