Lucene search
HistoryMay 26, 2009 - 4:30 p.m.
CVE-2009-1787
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.001
Percentile
31.9%
Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attackers to bypass authentication and gain administrative access via the (1) username and (2) password parameters.
Affected configurations
Node
phpdirsubmitphp_dir_submit
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpdirsubmit | php_dir_submit | * | cpe:2.3:a:phpdirsubmit:php_dir_submit:*:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
PHP Dir Submit - Authentication Bypass
2009-05-18 00:00:00
cve
cve
CVE-2009-1787
2009-05-26 16:30:02
prion
prion
Sql injection
2009-05-26 16:30:00
cvelist
cvelist
CVE-2009-1787
2009-05-26 16:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.001
Percentile
31.9%
Related for NVD:CVE-2009-1787