CVE-2009-2018
published 2009-06-09CVE-2009-2018: SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL…
PriorityP336medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
0.95%
56.8th percentile
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter.
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
ghsa5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache ODE Path Traversal vulnerability
ghsa·2022-05-14·CVSS 5.0
CVE-2018-1316 [MEDIUM] CWE-22 Apache ODE Path Traversal vulnerability
Apache ODE Path Traversal vulnerability
The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was addressed in Apache ODE 1.3.3 which was released in 2009, however the incorrect name CVE-2008-2370 was used on the advisory by mistake.
GHSA
GHSA-9x5w-x8gv-75qq: SQL injection vulnerability in admin/index
ghsa_unreviewed·2022-05-02
CVE-2009-2018 [MEDIUM] CWE-89 GHSA-9x5w-x8gv-75qq: SQL injection vulnerability in admin/index
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/35281http://www.vupen.com/english/advisories/2009/1523https://exchange.xforce.ibmcloud.com/vulnerabilities/50985https://www.exploit-db.com/exploits/8886http://secunia.com/advisories/35281http://www.vupen.com/english/advisories/2009/1523https://exchange.xforce.ibmcloud.com/vulnerabilities/50985https://www.exploit-db.com/exploits/8886
2009-06-09
Published