CVE-2009-1657: SQL Injection
Published May 17, 2009
·Updated
Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
5 affected components
b2evolution b2evolution
b2evolution Starrating plugin<=0.7.6
b2evolution Starrating plugin=0.6
b2evolution Starrating plugin=0.7
b2evolution Starrating plugin=0.7.5
Remediation
Event History
May 17, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
May 18, 2009
Data Sourced
12:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-1657?
CVE-2009-1657 is classified as a high-severity vulnerability due to its potential for remote code execution through SQL injection.
2
How do I fix CVE-2009-1657?
To fix CVE-2009-1657, update the Starrating plugin to version 0.7.7 or later.
3
What are the exploitation vectors for CVE-2009-1657?
CVE-2009-1657 can be exploited via various unspecified vectors allowing attackers to execute arbitrary SQL commands.
4
Which versions of the Starrating plugin are affected by CVE-2009-1657?
CVE-2009-1657 affects Starrating plugin versions 0.6 through 0.7.6.
5
Can CVE-2009-1657 be mitigated without upgrading the software?
Mitigation of CVE-2009-1657 is limited without upgrading, but implementing strict input validation may reduce risk.