CVE-2009-1316
published 2009-04-17CVE-2009-1316: Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to events_view.php…
PriorityP342high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.02%
59.0th percentile
Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to events_view.php and the (2) id parameter to events_clndr_view.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| abk-soft | ablespace | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
ghsa5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache ODE Path Traversal vulnerability
ghsa·2022-05-14·CVSS 5.0
CVE-2018-1316 [MEDIUM] CWE-22 Apache ODE Path Traversal vulnerability
Apache ODE Path Traversal vulnerability
The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was addressed in Apache ODE 1.3.3 which was released in 2009, however the incorrect name CVE-2008-2370 was used on the advisory by mistake.
GHSA
GHSA-38f7-2qg7-wj3f: Multiple SQL injection vulnerabilities in AbleSpace 1
ghsa_unreviewed·2022-05-02
CVE-2009-1316 [HIGH] CWE-89 GHSA-38f7-2qg7-wj3f: Multiple SQL injection vulnerabilities in AbleSpace 1
Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to events_view.php and the (2) id parameter to events_clndr_view.php.
No detection rules found.
No writeups or analysis indexed.
http://dsecrg.com/pages/vul/show.php?id=137http://secunia.com/advisories/34663http://www.securityfocus.com/archive/1/502670/100/0/threadedhttp://www.securityfocus.com/bid/34512https://www.exploit-db.com/exploits/8424http://dsecrg.com/pages/vul/show.php?id=137http://secunia.com/advisories/34663http://www.securityfocus.com/archive/1/502670/100/0/threadedhttp://www.securityfocus.com/bid/34512https://www.exploit-db.com/exploits/8424
2009-04-17
Published