high7.5
CVE-2009-2082
SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the …
Impact
SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Creative Web Solutions | Multi-Level Cms | Version 1.21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/54571
- http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt
- http://secunia.com/advisories/35154
- http://www.securityfocus.com/bid/35018
- http://osvdb.org/54571
- http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt
- http://secunia.com/advisories/35154
- http://www.securityfocus.com/bid/35018