CVE-2009-2573

Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via the (1) user parameter to (a) index.php and (b) rss.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:bioscripts:minitwitter:0.2_beta:*:*:*:*:*:*:*

History

21 Nov 2024, 01:05

Type Values Removed Values Added
References () http://www.exploit-db.com/exploits/8586 - () http://www.exploit-db.com/exploits/8586 -
References () http://www.securityfocus.com/archive/1/503155/100/0/threaded - () http://www.securityfocus.com/archive/1/503155/100/0/threaded -
References () http://www.securityfocus.com/bid/34795 - Exploit () http://www.securityfocus.com/bid/34795 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/50282 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/50282 -

Information

Published : 2009-07-22 17:30

Updated : 2024-11-21 01:05


NVD link : CVE-2009-2573

Mitre link : CVE-2009-2573

CVE.ORG link : CVE-2009-2573


JSON object : View

Products Affected

bioscripts

  • minitwitter
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')