CVE-2009-1316: SQL Injection
Published Apr 17, 2009
·Updated
Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to eventsview.php and the (2) id parameter to eventsclndrview.php.
Affected Software
1 affected component
Abk-soft Ablespace=1.0
Event History
Apr 17, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1316?
CVE-2009-1316 is considered a high severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2009-1316?
To fix CVE-2009-1316, you should sanitize and validate all user inputs to prevent SQL injection and upgrade to a patched version of AbleSpace.
3
What are the affected components in CVE-2009-1316?
CVE-2009-1316 affects the events_view.php and events_clndr_view.php components in AbleSpace 1.0.
4
Can CVE-2009-1316 be exploited remotely?
Yes, CVE-2009-1316 can be exploited remotely by attackers to execute unauthorized SQL commands on the server.
5
What versions of AbleSpace are vulnerable to CVE-2009-1316?
CVE-2009-1316 affects AbleSpace version 1.0.