CVE-2009-4698

Summary

Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://osvdb.org/56593
• http://www.securityfocus.com/bid/35820
• http://www.osvdb.org/56594
• http://www.exploit-db.com/exploits/9261
• http://www.exploit-db.com/exploits/9249
• http://osvdb.org/56595
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51985
• http://secunia.com/advisories/35966

References

• http://osvdb.org/56593
• http://www.securityfocus.com/bid/35820
• http://www.osvdb.org/56594
• http://www.exploit-db.com/exploits/9261
• http://www.exploit-db.com/exploits/9249
• http://osvdb.org/56595
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51985
• http://secunia.com/advisories/35966

• ←Previous
• Next→