CVE-2009-3252

Description

Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/52940

http://www.vupen.com/english/advisories/2009/2494

http://www.exploit-db.com/exploits/9553

http://secunia.com/advisories/36517

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS