CVE-2009-0428: SQL Injection
Published Feb 5, 2009
·Updated
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Affected Software
2 affected components
DMXReady Secure Document Library<=1.1
DMXReady Secure Document Library=1.0
Event History
Feb 5, 2009
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0428?
CVE-2009-0428 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2009-0428?
To fix CVE-2009-0428, apply input validation and parameterized queries to prevent SQL injection.
3
Which versions of DMXReady Secure Document Library are affected by CVE-2009-0428?
CVE-2009-0428 affects DMXReady Secure Document Library 1.0 and earlier, up to version 1.1.
4
What does CVE-2009-0428 allow attackers to do?
CVE-2009-0428 allows attackers to execute arbitrary SQL commands via the cid parameter.
5
Is there a known exploit for CVE-2009-0428?
Yes, there are known exploits for CVE-2009-0428 that leverage the SQL injection vulnerability.