cbcvebase.

Maxdev Cwguestbook vulnerabilities

1 known vulnerability affecting maxdev/cwguestbook.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2009-2307P3HIGHCVSS 7.5PoC≤ 2.12009-07-02
CVE-2009-2307 [HIGH] CWE-89 CVE-2009-2307: SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php.
nvd
Maxdev Cwguestbook vulnerabilities | cvebase