CVE-2009-4889: SQL Injection
Published Jun 11, 2010
·Updated
SQL injection vulnerability in books.php in the Book Panel (bookpanel) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter.
Affected Software
4 affected components
Basti2web Book Panel
PHP-Fusion php-fusion
All of the following
Basti2web Book Panel
PHP-Fusion php-fusion
Event History
Jun 11, 2010
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
02:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·02:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4889?
CVE-2009-4889 has a medium severity rating due to its potential for allowing attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2009-4889?
To fix CVE-2009-4889, validate and sanitize user inputs for the bookid parameter in the Book Panel module.
3
What software is affected by CVE-2009-4889?
CVE-2009-4889 affects the Book Panel module for PHP-Fusion.
4
Can I exploit CVE-2009-4889 remotely?
Yes, CVE-2009-4889 can be exploited remotely by injecting SQL commands through the bookid parameter.
5
What programming flaw is exploited in CVE-2009-4889?
CVE-2009-4889 exploits an SQL injection vulnerability in the books.php file of the Book Panel module.