Unscored severity · published Feb 10, 2009
CVE-2009-0451
SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SK
Skalinks · Skalinks
1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0451
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0451
Exploit
http://www.securityfocus.com/bid/33546
www.exploit-db.com
https://www.exploit-db.com/exploits/7932
More from Skalinks
–
CVE-2007-5917
Cross-site request forgery (CSRF) vulnerability in admin/admin_account.php in Skalinks 1.5 and earlier allows remote attackers to add arbitrary privileged accounts as…