Vulnerability Database

290,301

Total vulnerabilities in the database

CVE-2009-2781

SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the qc parameter in an addcomment action, a different vector than CVE-2006-1666.

  • Published: Aug 17, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-2781
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
arabportal / arab_portal 2.0.1 2.0.1.x
arabportal / arab_portal 2.1 2.1.x
arabportal / arab_portal 2.2 2.2.x