Lucene search

MitreCVE-2009-2439

HistoryJul 13, 2009 - 2:30 p.m.

CVE-2009-2439

2009-07-1314:30:00

CWE-89

mitre

web.nvd.nist.gov

cve-2009-2439

sql injection

web development

alibaba clone

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

33.1%

JSON

Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group.

Affected configurations

Nvd

Node

web_development_housealibaba_clone

VendorProductVersionCPE
web_development_housealibaba_clone*cpe:2.3:a:web_development_house:alibaba_clone:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
web_development_house	alibaba_clone	*	cpe:2.3:a:web_development_house:alibaba_clone::::::::

References

packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt

secunia.com/advisories/35741

www.vupen.com/english/advisories/2009/1838

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.001

Percentile

33.1%

JSON

Related for CVE-2009-2439