CVE-2009-2451

Metadata

CVE-2009-2451
7.5
exploit-db.com, securityfocus.com, securityfocus.com, securityfocus.com
2009-07-14
2017-09-19 07:07

Description

Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form.

Related Vulnerabilities