PT-2009-3356 · Auth Php · Auth Php

X0R · Published 2009-02-25 · Updated 2017-09-29 · CVE-2009-0738

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Auth Php version 1.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username and passwd parameters.

Recommendations For Auth Php version 1.0, consider validating and sanitizing user input for the username and passwd parameters to prevent SQL injection attacks. As a temporary workaround, restrict access to the login functionality until a proper fix is applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2009-0738

Affected Products

Auth Php

References · 4

• 🔥 https://exploit-db.com/exploits/8033 · Exploit
• http://secunia.com/advisories/33908 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0738 · Security Note
• http://securityfocus.com/bid/33723 · Note