CVE-2009-2366: SQL Injection
SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2366?
CVE-2009-2366 has a medium severity due to the potential for remote SQL injection attacks leading to data compromise.
How do I fix CVE-2009-2366?
To fix CVE-2009-2366, upgrade the affected DataCheck Solutions ForumPal software to a version that is not vulnerable, as no official patches for earlier versions have been released.
What are the affected versions in CVE-2009-2366?
CVE-2009-2366 affects ForumPal FE version 1.1 and ForumPal version 1.5.
Can CVE-2009-2366 lead to remote attacks?
Yes, CVE-2009-2366 allows remote attackers to execute arbitrary SQL commands, which can lead to unauthorized access to the database.
What parameters are exploited in CVE-2009-2366?
CVE-2009-2366 exploits the 'password' parameter in version 1.1 and the 'p_password' parameter in version 1.5.