NetSight
IP …
high7.5

CVE-2009-1208

SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string fu…

Impact

SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.

Affected products

VendorProductAffected versions
Auth2dbAuth2db
Versions 0.1.0, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6
Auth2dbauth2db0.1.1
All versions

Weakness classification

CWE-89

References