CVE-2009-2164: SQL Injection
Published Jun 22, 2009
·Updated
Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the code parameter to activate.php or (2) the dest parameter to index.php.
Affected Software
1 affected component
Kjtechforce mailman=beta1
Event History
Jun 22, 2009
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2164?
CVE-2009-2164 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2009-2164?
To fix CVE-2009-2164, ensure that magic_quotes_gpc is enabled or update to a version of Kjtechforce mailman that addresses these SQL injection vulnerabilities.
3
What are the affected versions of Kjtechforce mailman for CVE-2009-2164?
CVE-2009-2164 affects Kjtechforce mailman beta1.
4
What kind of attacks can be executed due to CVE-2009-2164?
CVE-2009-2164 allows remote attackers to execute arbitrary SQL commands.
5
Which parameters are vulnerable in CVE-2009-2164?
The parameters vulnerable in CVE-2009-2164 are 'code' in activate.php and 'dest' in index.php.