CVE-2009-4060
02h00 +00:00
Deskripsi CVE
Informasi CVE
Kelemahan Terkait
| Nama Kelemahan | Sumber | |
|---|---|---|
| Improper Neutralization of Special Elements used in an SQL Command The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Metrik
| Metrik | Skor | Tingkat keparahan | CVSS Vektor | Sumber |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
Skor EPSS
Persentil EPSS
Informasi eksploitasi
Exploit Database EDB-ID : 33362
Tanggal publikasi : 2009-11-18 23h00 +00:00
Penulis : Sangte Amtham
Terverifikasi EDB : Yes
Produk yang Disebutkan
Konfigurasi 0
Cubecart>>Cubecart >> Version Hingga (termasuk) 4.3.6
Cubecart>>Cubecart >> Version 3.0.0
Cubecart>>Cubecart >> Version 3.0.1
Cubecart>>Cubecart >> Version 3.0.2
Cubecart>>Cubecart >> Version 3.0.3
Cubecart>>Cubecart >> Version 3.0.4
Cubecart>>Cubecart >> Version 3.0.5
Cubecart>>Cubecart >> Version 3.0.6
Cubecart>>Cubecart >> Version 3.0.7
Cubecart>>Cubecart >> Version 3.0.8
Cubecart>>Cubecart >> Version 3.0.9
Cubecart>>Cubecart >> Version 3.0.10
Cubecart>>Cubecart >> Version 3.0.11
Cubecart>>Cubecart >> Version 3.0.12
Cubecart>>Cubecart >> Version 3.0.13
Cubecart>>Cubecart >> Version 3.0.14
Cubecart>>Cubecart >> Version 3.0.15
Cubecart>>Cubecart >> Version 3.0.16
Cubecart>>Cubecart >> Version 3.0.17
Cubecart>>Cubecart >> Version 3.0.18
Cubecart>>Cubecart >> Version 3.0.19
Cubecart>>Cubecart >> Version 3.0.20
Cubecart>>Cubecart >> Version 4.0.0
Cubecart>>Cubecart >> Version 4.0.0
Cubecart>>Cubecart >> Version 4.0.0
Cubecart>>Cubecart >> Version 4.0.0
Cubecart>>Cubecart >> Version 4.0.1
Cubecart>>Cubecart >> Version 4.0.2
Cubecart>>Cubecart >> Version 4.0.3
Cubecart>>Cubecart >> Version 4.1.0
Cubecart>>Cubecart >> Version 4.1.0
Cubecart>>Cubecart >> Version 4.1.0
Cubecart>>Cubecart >> Version 4.1.1
Cubecart>>Cubecart >> Version 4.2.0
Cubecart>>Cubecart >> Version 4.2.1
Cubecart>>Cubecart >> Version 4.2.2
Cubecart>>Cubecart >> Version 4.2.3
Cubecart>>Cubecart >> Version 4.3.0
Cubecart>>Cubecart >> Version 4.3.1
Cubecart>>Cubecart >> Version 4.3.2
Cubecart>>Cubecart >> Version 4.3.3
Cubecart>>Cubecart >> Version 4.3.4
Cubecart>>Cubecart >> Version 4.3.5
