CVE-2009-3223: SQL Injection

Published Sep 16, 2009

Updated

SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

Affected Software

1 affected component

Inoutscripts Inout Adserver

Event History

Sep 16, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3223?

CVE-2009-3223 is considered to have a high severity due to its potential for allowing remote authenticated users to execute arbitrary SQL commands.

How do I fix CVE-2009-3223?

To fix CVE-2009-3223, it is recommended to sanitize and validate the 'id' parameter in the ppc-add-keywords.php file to prevent SQL injection.

What causes CVE-2009-3223?

CVE-2009-3223 is caused by improper handling of user input in the 'id' parameter, allowing SQL commands to be executed without proper validation.

Who is affected by CVE-2009-3223?

CVE-2009-3223 affects users of Inout Adserver versions that are vulnerable to SQL injection in the ppc-add-keywords.php component.

Can CVE-2009-3223 be exploited remotely?

Yes, CVE-2009-3223 can be exploited remotely by authenticated users who can manipulate the 'id' parameter.