CVE-2009-1584 — MEDIUM (6.0)

Vulnerability Description

Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php.

CVSS Score

6.0

MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
R020	Tematres	1.0.3

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2009-1584?

CVE-2009-1584 is a vulnerability with a CVSS score of 6.0 (MEDIUM). Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1...

How severe is CVE-2009-1584?

CVE-2009-1584 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-1584?

Check the references section above for vendor advisories and patch information. Affected products include: R020 Tematres.