CVE-2009-1651: SQL Injection
Published May 16, 2009
·Updated
SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.
Affected Software
1 affected component
2daybiz Business Community Script
Event History
May 16, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1651?
The severity of CVE-2009-1651 is considered moderate, as it allows remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2009-1651?
To fix CVE-2009-1651, validate and sanitize user input for the mid parameter in admin/member_details.php.
3
What type of vulnerability is CVE-2009-1651?
CVE-2009-1651 is an SQL injection vulnerability affecting the 2daybiz Business Community Script.
4
Which software is affected by CVE-2009-1651?
CVE-2009-1651 affects the 2daybiz Business Community Script.
5
Can CVE-2009-1651 be exploited without authentication?
Yes, CVE-2009-1651 can be exploited remotely without authentication, allowing unauthorized access to the database.